CVE-2026-71280

go-shiori's DownloadBookmark internal/core/download.go fetches a caller-supplied bookmark URL using a plain http.Client with no custom DialContext or destination-IP validation no IsLoopback, IsPrivate, IsUnspecified, or IsLinkLocalUnicast checks...

EUVD-2017-4187

Malware in sbrugna...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2024-3883

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and...

WordPress 3D FlipBook plugin <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL vulnerability

Authenticated Author+ Stored Cross-Site Scritping via Bookmark URL vulnerability discovered by Tim Coen in WordPress Plugin 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions = 1.15.4...

PT-2024-28236 · WordPress · 3D Flipbook

Name of the Vulnerable Software and Affected Versions: 3D FlipBook plugin for WordPress versions up to, and including, 1.15.4 Description: The issue is related to Stored Cross-Site Scripting via the Bookmark URL field due to insufficient input sanitization and output escaping. This allows...

CVE-2024-3883: Improper Neutralization of Input During Web Page Generation

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and...

GHSA-CM99-X97G-9QX8 Liferay Portal XSS Vulnerability

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

Liferay Portal XSS Vulnerability

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

Cross site scripting

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...

CVE-2017-12648: Improper Neutralization of Input During Web Page Generation

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL...