Advisories · Technology

mpol Gwolle Guestbook.

Every CVE that names mpol Gwolle Guestbook among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103481 CVE record

CVSS 6.1 Medium

Gwolle Guestbook <= 5.1.1 - Reflected Cross-Site Scripting via 'permalink' Parameter
- mpol Gwolle Guestbook
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2026
CVE-2025-5807 CVE record

CVSS 6.1 Medium

Gwolle Guestbook <= 4.9.2 - Unauthenticated Stored Cross-Site Scripting via `gwolle_gb_content` Parameter
- mpol Gwolle Guestbook
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2025