CVE-2008-0618

Name of the Vulnerable Software and Affected Versions DMSGuestbook plugin for WordPress versions 1.7.0 and 1.8.0

Description The issue allows remote attackers to inject arbitrary web script or HTML via the gbname, gbemail, gburl, and gbmsg parameters to unspecified programs, potentially leading to cross-site scripting (XSS) attacks.

Recommendations For DMSGuestbook plugin for WordPress version 1.7.0, update to a version that fixes the XSS vulnerabilities. For DMSGuestbook plugin for WordPress version 1.8.0, update to a version that fixes the XSS vulnerabilities. As a temporary workaround, consider restricting the use of the gbname, gbemail, gburl, and gbmsg parameters until a patch is available.