Unscored CVE-2017-1002017 EUVD-2017-1632GHSA-5x4j-f676-6cj8

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XS…

Published Sep 14, 2017 · Updated Sep 16, 2024 · Assigned by larry_cashdollar

Vendor: Bob Cares Product: gift-certificate-creator Category: Web / CMS

Description

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability.

Affected products

Vendor	Product	Affected	Fixed
Bob Cares	gift-certificate-creator	unspecified – < 1.0	1.0

References

http://www.vapidlabs.com/advisory.php?v=191
https://wordpress.org/plugins/gift-certificate-creator/