CVE-2017-1002017 Gift Certificate Creator <= 1.0 - Stored Cross-Site Scripting
MediumCVSS 6.1
EPSS 0.71%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bobcares gift-certificate-creator | = 1.0 | No fix listed |
| Bob Cares gift-certificate-creator | < 1.0 | 1.0 |
| wordpress gift-certificate-creator(WordPress) | < 1.1 | 1.1 |
References
- www.vapidlabs.com exploit patch third-party-advisory
- wordpress.org product third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org