CVE-2016-10966: Improper Limitation of a Pathname to a Restricted Directory

The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload...

CVE-2008-2188: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 bookCopyright and 2 ver parameters to a footer.php, and the 3 bookName, 4 bookMetaTags, and 5 estiloCSS parameters to b header.php...