PT-2025-1908 · Stormhill Media · Mybookprogress

The MyBookProgress plugin for WordPress, developed by Stormhill Media, is susceptible to Stored Cross-Site Scripting XSS attacks due to inadequate input sanitization and output escaping. This issue affects all versions up to and including 1.0.8, specifically through the 'book' parameter...

WordPress MyBookProgress by Stormhill Media plugin <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via book Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via book Parameter vulnerability discovered by SOPROBRO in WordPress Plugin MyBookProgress by Stormhill Media versions = 1.0.8...