Description

WordPress Plugin DMSGuestbook is prone to multiple vulnerabilities, which can be exploited by malicious users to disclose sensitive information or to manipulate data, and by malicious people to conduct cross-site scripting and script insertion attacks.

Remediation

Update to plugin version 1.10.0 or latest

References

http://www.exploit-db.com/exploits/5035/

http://www.securityfocus.com/archive/1/487437

http://secunia.com/advisories/28759/

Related Vulnerabilities

WordPress Plugin Duplicate Post Cross-Site Scripting (2.6)

phpMyAdmin Other Vulnerability (CVE-2007-1395)

SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2020-1439)

WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.1.9)

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35152)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update CWE-22 CWE-79 CWE-89 CVE-2008-0615 CVE-2008-0616 CVE-2008-0617 CVE-2008-0618