CVE-2018-17884

XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-admin/index.php

• CWE-79

• http://www.defensecode.com/advisories/DC-2018-05-008_WordPress_Gwolle_Guestbook_Plugin_Advisory.pdfExploit, Third Party Advisory
• https://seclists.org/bugtraq/2018/Jul/74Exploit, Mailing List, Third Party Advisory
• https://wordpress.org/plugins/gwolle-gb/#developersThird Party Advisory
• http://www.defensecode.com/advisories/DC-2018-05-008_WordPress_Gwolle_Guestbook_Plugin_Advisory.pdfExploit, Third Party Advisory
• https://seclists.org/bugtraq/2018/Jul/74Exploit, Mailing List, Third Party Advisory
• https://wordpress.org/plugins/gwolle-gb/#developersThird Party Advisory

Published

Oct 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17879An issue was discovered on certain ABUS TVIP cameras. The CG…9.8
• CVE-2018-1788IBM Spectrum Protect Server 7.1 and 8.1 could disclose highl…4.1
• CVE-2018-17880On D-Link DIR-823G 2018-09-19 devices, the GoAhead configura…
• CVE-2018-17881On D-Link DIR-823G 2018-09-19 devices, the GoAhead configura…
• CVE-2018-17882An Integer overflow vulnerability exists in the batchTransfe…
• CVE-2018-17883An issue was discovered in Open Ticket Request System (OTRS)…6.1
• CVE-2018-17886An issue was discovered in JEESNS 1.3. The XSS filter in com…
• CVE-2018-17888NUUO CMS all versions 3.1 and prior, The application uses a …
• CVE-2018-17889In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 a…
• CVE-2018-1789IBM API Connect v2018.1.0 through v2018.3.4 could allow an a…8.4
• CVE-2018-17890NUUO CMS all versions 3.1 and prior, The application uses in…9.8
• CVE-2018-17891Carestream Vue RIS, RIS Client Builds: Version 11.2 and prio…