CVE-2024-23501

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

CVE-2024-23501

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

CVE-2024-23501

CVE-2024-23501 is a Stored XSS vulnerability in the Ebook Store WordPress plugin by Shopfiles Ltd. Public details indicate improper neutralization of input during web page generation, allowing stored script execution. Affected range is Ebook Store versions up to 5.788. The issue is listed as Patc...

WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.788 Fixed in 5.8002 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23501 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1c136e2d77a0 Credits Dragonim Required privilege Administrator...