CVE-2017-20177

Low

Description

A vulnerability, which was classified as problematic, has been found in WangGuard Plugin 1.8.0 on WordPress. Affected by this issue is the function wangguard_users_info of the file wangguard-user-info.php of the component WGG User List Handler. The manipulation of the argument userIP leads to cross site scripting. The attack may be launched remotely. The patch is identified as 88414951e30773c8d2ec13b99642688284bf3189. It is recommended to apply a patch to fix this issue. VDB-220214 is the identifier assigned to this vulnerability.

SeverityLow

CVSS3.5

Exploit probability—

ProductWangguard

PublishedFeb 6, 2023

First seenFeb 6, 2023

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Patches

github.com/joseconti/WangGuard/commit/88414951e30773c8d2ec13b99642688284bf3189

Affected products

Product	Affected versions	Fixed in
wangguard_project wangguard	1.8.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.