RSS   Podatności dla 'Gwolle guestbook'   RSS

2022-06-23
 
CVE-2017-20089

CWE-79
 

 
A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.

 
2017-09-11
 
CVE-2015-8351

CWE-94
 

 
PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences regardless of whether allow_url_include is enabled.

 


Copyright 2024, cxsecurity.com

 

Back to Top