Cross site scripting

2011-12-2904:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.4%

JSON

Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
winn_guestbookeq2.4.1 beta
winn_guestbookeq2.4.3
winn_guestbookeq2.4.5
winn_guestbookeq2.4.4
winn_guestbookeq2.4.2
winn_guestbookeq2.4.6
winn_guestbookeq<= 2.4.8c
winn_guestbookeq2.4.898
winn_guestbookeq2.4.7

Name	Operator	Version
winn_guestbook	eq	2.4.1 beta
winn_guestbook	eq	2.4.3
winn_guestbook	eq	2.4.5
winn_guestbook	eq	2.4.4
winn_guestbook	eq	2.4.2
winn_guestbook	eq	2.4.6
winn_guestbook	eq	<= 2.4.8c
winn_guestbook	eq	2.4.898
winn_guestbook	eq	2.4.7