search

mibuthu / wp-comment-guestbook

Wordpress Plugin to add a guestbook site which uses the wordpress integrated comments
https://wordpress.org/plugins/comment-guestbook/
4 stars 3 forks source link

Sanitization of comments data is not correct #16

Open mibuthu opened 10 years ago

mibuthu commented 10 years ago

The comment data is not correctly sanitized before it is saved to the database. Example: A logged in user can enter script tags in the comment text.

Probably this is also a wordpress bug. Enhanced checking is required.