CVE-2017-1002017: Bobcares Gift-Certificate-Creator

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability.

Affected products

• Bobcares Gift-Certificate-Creator: version 1.0 only

Published 2017-09-14. Last modified 2026-06-17.