What’s Vulnerable › Vulnerabilities

CVE-2017-1002017

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-09-14 · updated 2026-06-17
• Weakness: CWE-79

Description

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability.

Affected products

• Bob Cares gift-certificate-creator: 1.0

References

• http://www.vapidlabs.com/advisory.php?v=191
• https://wordpress.org/plugins/gift-certificate-creator/
• http://www.vapidlabs.com/advisory.php?v=191
• https://wordpress.org/plugins/gift-certificate-creator/

Get alerted when CVE-2017-1002017 or the next vulnerability affects your stack