WordPress Plugin Vulnerabilities

Gift Certificate Creator <= 1.0 - Stored XSS

Description

The Gift Certificate Creator WordPress plugin was affected by a Stored XSS security vulnerability.

Affects Plugins

Plugin icon
gift-certificate-creator
Fixed in 1.1

References

CVE
CVE-2017-1002017
URL
http://www.vapidlabs.com/advisory.php?v=191

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
a90b88c8-b219-40a0-aad1-c9fab0ad63d8

Timeline

Publicly Published
2017-06-11 (about 6 years ago)
Added
2019-08-21 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2023-05-09
Title
Post Snippets < 4.0.3 - Admin+ Stored XSS
Published
2023-12-27
Title
Product Code for WooCommerce < 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-03-19
Title
Responsive Gallery Grid < 2.3.11 - Admin+ Stored XSS
Published
2023-03-08
Title
Image Over Image For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS
Published
2020-08-14
Title
Sell Media < 2.4.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)