49 matches found
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...
CVE-2023-45602
CVE-2023-45602 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the Shopfiles Ltd Ebook Store plugin for WordPress. Public references indicate affected versions are up to 5.785 (some sources list up to 5.784/5.8002). The issue is caused by reflected XSS and could enabl...
CVE-2023-45602 WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.785 versions...
WordPress Ebook Store Plugin <= 5.8002 is vulnerable to Cross Site Scripting (XSS)
Software Ebook Store Type Plugin Vulnerable versions = 5.8002 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45602 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 98c678ae3282 Credits Le Ngoc Anh Required...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.775 versions...
CVE-2023-22690
CVE-2023-22690 is a WordPress Ebook Store plugin vulnerability affecting versions ≤ 5.775. It is described as an authenticated (admin+) Stored Cross-Site Scripting (XSS) flaw. Public details in Patchstack indicate the issue has been fixed in version 5.78, addressing the XSS vector. The NVD entry ...
CVE-2023-22690 WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.775 versions...
PT-2023-18635 · Unknown · Ebook Store Plugin
Name of the Vulnerable Software and Affected Versions: Ebook Store plugin versions = 5.775 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Ebook Store plugin versions = 5.775, update to ...
WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)
Software Ebook Store Type Plugin Vulnerable versions = 5.775 Fixed in 5.78 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22690 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bf3f6e253a15 Credits yuyudhn Required privilege...