16 matches found
CVE-2026-71280
go-shiori's DownloadBookmark internal/core/download.go fetches a caller-supplied bookmark URL using a plain http.Client with no custom DialContext or destination-IP validation no IsLoopback, IsPrivate, IsUnspecified, or IsLinkLocalUnicast checks...
EUVD-2017-4187
Malware in sbrugna...
CVE-2017-12648
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
CVE-2024-3883
The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and...
WordPress 3D FlipBook plugin <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL vulnerability
Authenticated Author+ Stored Cross-Site Scritping via Bookmark URL vulnerability discovered by Tim Coen in WordPress Plugin 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions = 1.15.4...
CVE-2024-3883: Improper Neutralization of Input During Web Page Generation
The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and...
PT-2024-28236 · WordPress · 3D Flipbook
Name of the Vulnerable Software and Affected Versions: 3D FlipBook plugin for WordPress versions up to, and including, 1.15.4 Description: The issue is related to Stored Cross-Site Scripting via the Bookmark URL field due to insufficient input sanitization and output escaping. This allows...
Liferay Portal XSS Vulnerability
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
GHSA-CM99-X97G-9QX8 Liferay Portal XSS Vulnerability
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
Cross site scripting
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
CVE-2017-12648
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
CVE-2017-12648
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
CVE-2017-12648
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
CVE-2017-12648
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...
PT-2017-12627
Name of the Vulnerable Software and Affected Versions Liferay Portal versions prior to 7.0 CE GA4 Description A cross-site scripting XSS issue exists, allowing potential exploitation via a bookmark URL. Recommendations For versions prior to 7.0 CE GA4, update to version 7.0 CE GA4 or later to...