{"id":"CVE-2017-20089","aliases":["EUVD-2017-11096","GHSA-grmq-8wh7-vqvm"],"status":"published","title":"Gwolle Guestbook Plugin cross site scriting","description":"A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0073,"percentile":0.54528,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79","CWE-80"],"published":"2022-06-23T04:20:29Z","modified":"2026-06-17T01:15:09Z","products":[{"vendor":"gwolle_guestbook_project","product":"gwolle_guestbook"},{"vendor":"unspecified","product":"gwolle guestbook plugin"}],"references":[{"url":"http://seclists.org/bugtraq/2017/Mar/1","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"https://vuldb.com/?id.97379","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-20089"},{"url":"https://github.com/advisories/GHSA-grmq-8wh7-vqvm"}],"sources":{"cve":[{"id":"CVE-2017-20089","title":"Gwolle Guestbook Plugin cross site scriting","description":"A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.","status":"published","published":"2022-06-23T04:20:29Z","modified":"2025-04-15T14:14:26.556Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-80"],"updated_at":"2026-11-02T14:33:11.59359Z"}],"euvd":[{"id":"EUVD-2017-11096","description":"A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.","status":"published","published":"2022-06-23T04:20:29Z","modified":"2025-04-15T14:14:26Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:29.674488Z"}],"ghsa":[{"id":"GHSA-grmq-8wh7-vqvm","title":"A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic....","description":"A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.","status":"published","published":"2022-06-24T00:00:33Z","modified":"2023-01-27T05:05:19Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:42:40.370534Z"}],"nvd":[{"id":"CVE-2017-20089","description":"A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.","status":"published","published":"2022-06-23T05:15:07.787Z","modified":"2026-06-17T01:15:09.177Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-80","CWE-79"],"updated_at":"2026-11-02T14:04:21.492973Z"}]}}