Winn Winn Guestbook
2 CVEs affecting Winn Winn Guestbook. Latest disclosed: 2011-12-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2011-5026 | | 2011-12-29 | Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitr… | |
CVE-2009-4678 | | 2010-03-08 | Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. |