CVE-2018-17884: XSS
Published Oct 2, 2018
·Updated
XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATHINFO to wp-admin/index.php
Affected Software
1 affected component
Gwolle Guestbook Project Gwolle Guestbook Wordpress<2.5.4
Event History
Oct 2, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17884?
CVE-2018-17884 is classified as a moderate severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2018-17884?
To fix CVE-2018-17884, update the Gwolle Guestbook plugin to version 2.5.4 or later.
3
Where does CVE-2018-17884 occur?
CVE-2018-17884 occurs in the admin/gb-dashboard-widget.php file of the Gwolle Guestbook plugin.
4
Which versions of Gwolle Guestbook are affected by CVE-2018-17884?
CVE-2018-17884 affects versions of Gwolle Guestbook prior to 2.5.4.
5
What type of attack can CVE-2018-17884 facilitate?
CVE-2018-17884 can facilitate Cross-Site Scripting (XSS) attacks, potentially allowing an attacker to execute scripts in a user's browser.