Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook prior to 2.4.8d allows remote malicious users to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party information.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
winn winn guestbook |
||
winn winn guestbook 2.4.2 |
||
winn winn guestbook 2.4.1 |
||
winn winn guestbook 2.4.6 |
||
winn winn guestbook 2.4.5 |
||
winn winn guestbook 2.4.4 |
||
winn winn guestbook 2.4.3 |
||
winn winn guestbook 2.4.8b |
||
winn winn guestbook 2.4.7 |