Skip to content
OpenAdvisories

Vendor

garber

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.4

    GBI To Print <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'div' Shortcode Attribute

    The GBI To Print plugin for WordPress is vulnerable to Stored Cross-Site Scripting in version 1.0 via the 'div' attribute of the 'gbitoprint' shortcode. This is due to insufficient output escaping in the gbi_toprint_shortcode() function, which concatenates th…