CVE-2017-1002017

Description

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability.

Affected products

• Bob Cares / gift-certificate-creatorunspecified – 1.0

References

• MISChttp://www.vapidlabs.com/advisory.php?v=191
• MISChttps://wordpress.org/plugins/gift-certificate-creator/