CVE-2011-1060: Webmastersite Wsn Guest

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php.

Affected products

• Webmastersite Wsn Guest: version 1.24 only

Published 2011-02-23. Last modified 2026-06-16.