Lucene search
+L

31 matches found

Cvelist
Cvelist
added 2024/08/12 10:9 p.m.34 views

CVE-2024-43152 WordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery allows Stored XSS.This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery: from n/a through 1.15.6...

5.9CVSS0.00297EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/02 9:15 a.m.7 views

CVE-2024-3883

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and...

5.4CVSS5.9AI score0.00323EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/05/02 2:37 a.m.4 views

WordPress 3D FlipBook plugin <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL vulnerability

Authenticated Author+ Stored Cross-Site Scritping via Bookmark URL vulnerability discovered by Tim Coen in WordPress Plugin 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions = 1.15.4...

6.4CVSS6.3AI score0.00323EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.9 views

WordPress plugin 3D FlipBook 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.2AI score0.00323EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/04/29 12:0 a.m.12 views

WordPress iPages Flipbook Plugin <= 1.5.1 is vulnerable to Broken Access Control

Software iPages Flipbook Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33909 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 75f60d56e4ee Credits Steven Julian Required...

6.6AI score0.00249EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.4 views

WordPress Plugin WordPress Flipbook by Supsystic 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WordPress...

4.3CVSS6.6AI score0.00212EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/01/16 12:0 a.m.6 views

WordPress plugin 3D FlipBook 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.4AI score0.00534EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2022/11/01 12:0 a.m.5 views

PT-2022-24133 · Unknown · Flipbook Plugin

Name of the Vulnerable Software and Affected Versions: Flipbook Plugin affected versions not specified Description: A vulnerability was found in the Flipbook Plugin, affecting some unknown functionality of the file post.php of the component Edit Post Handler. The manipulation of the Shortcode...

6AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/03/21 7:15 p.m.6 views

CVE-2022-0423

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook...

5.4CVSS5.9AI score0.00591EPSS
SaveExploits2References2
OSV
OSV
added 2022/03/21 7:15 p.m.5 views

CVE-2022-0423

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook...

5.4CVSS6.1AI score0.00591EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/21 12:0 a.m.7 views

WordPress plugin 3D FlipBook 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

5.4CVSS5.4AI score0.00591EPSS
SaveExploits2References2
Rows per page
Query Builder