CVE-2023-5200 flowpaper <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The flowpaper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'flipbook' shortcode in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-5200

CVE-2023-5200 refers to a stored XSS in the WordPress plugin flowpaper (flowpaper-lite-pdf-flipbook). Affected versions are up to and including 2.0.3. The vulnerability stems from insufficient input sanitization and output escaping on user-supplied shortcode attributes, allowing an attacker with ...

CVE-2023-5200 flowpaper <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The flowpaper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'flipbook' shortcode in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

WordPress flowpaper Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software flowpaper Type Plugin Vulnerable versions = 2.0.3 Fixed in 2.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5200 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fa939bd6216f Credits Lana Codes Required privilege...