Lucene search
+L

2 matches found

NVD
NVD
added 2025/02/18 5:15 a.m.22 views

CVE-2024-13588

The Simplebooklet PDF Viewer and Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'simplebooklet' shortcode in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/18 4:21 a.m.7 views

CVE-2024-13588 Simplebooklet PDF Viewer and Embedder <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Simplebooklet PDF Viewer and Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'simplebooklet' shortcode in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS7.4AI score0.00241EPSS
SaveExploits0References2
Rows per page
Query Builder