CVE-2022-1156

The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2022-13678

Name of the Vulnerable Software and Affected Versions Books & Papers WordPress plugin versions 0.20210223 and earlier Description The issue allows high privilege users to perform Cross-Site Scripting attacks even when the unfiltered html capability is disallowed, due to the Custom DB prefix...

CVE-2022-1156: Improper Neutralization of Input During Web Page Generation

The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress Books & Papers plugin <= 0.20210223 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by fuzzyap1 in WordPress Books & Papers plugin versions = 0.20210223. Solution Deactivate and delete. This plugin has been closed as of February 15, 2022 and is not available for download. This closure is temporary, pending a full review...