gwolle_guestbook vulnerabilities

CVEs whose affected-version data names the gwolle_guestbook package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103481Medium· 6.1

yesterday

Gwolle Guestbook <= 5.1.1 - Reflected Cross-Site Scripting via 'permalink' Parameter

The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it…

▾ Sunlitmpol · Gwolle GuestbookEPSS 0.21%via CVEORG