WordPress Plugin Vulnerabilities

GD Rating System < 2.1 - XSS

Description

The GD Rating System WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
gd-rating-system
Fixed in 2.1

References

CVE
CVE-2017-18591

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
351454d3-5410-4620-b9fa-ae6980208cda

Timeline

Publicly Published
2017-02-24 (about 9 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-01-16
Title
WP Photo Sphere <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-01-27
Title
Simple Archive Generator <= 5.2 - Reflected Cross-Site Scripting
Published
2024-11-05
Title
MapPress Maps for WordPress < 2.94.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Block
Published
2025-02-25
Title
Quiz Organizer <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2024-07-31
Title
Breakdance < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting