MAL-2024-2120 Malicious code in down_load_ebook_a_gambling_man_by_david_baldacci_59vmv (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2119 Malicious code in down_load_ebook_7_maneras_de_lograr_una_mentalidad_positiva_by_libroteka_ktqzx (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2118 Malicious code in down_load_ebook_3_nouvelles_engagees_by_eugene_ionesco_dino_buzzati_boris_vian_792ow (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2117 Malicious code in down_load_ebook_30_minuten_okr_objectives_key_results_by_erno_marius_obogeanu_hempel_andre_daiyu_steiner_qz80m (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in down_load_ebook_30_minuten_okr_objectives_key_results_by_erno_marius_obogeanu_hempel_andre_daiyu_steiner_qz80m (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2116 Malicious code in down_load_ebook_100_meisterwerke_der_weltliterature_klassiker_di_by_franz_kafka_fjodor_michailowitsch_dostojewski_ru_dwbpw (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2115 Malicious code in down_load_ebook_100_coisas_que_milionarios_fazem_by_nigel_cumberland_e31fd (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in down_load_ebook_100_coisas_que_milionarios_fazem_by_nigel_cumberland_e31fd (npm)

--- -= Per source details. Do not edit below this line.=-...

Audiobookshelf 安全漏洞

Audiobookshelf is a self-hosted audiobook and podcast server from Audiobookshelf Open Source. A security vulnerability exists in Audiobookshelf versions prior to 2.10.0, which stems from the fact that opening an eBook containing a malicious script can result in the execution of code in a browser...

Ebook Store < 5.8002 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-23501

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

CVE-2024-23501

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

CVE-2024-23501 WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

CVE-2024-23501

CVE-2024-23501 is a Stored XSS vulnerability in the Ebook Store WordPress plugin by Shopfiles Ltd. Public details indicate improper neutralization of input during web page generation, allowing stored script execution. Affected range is Ebook Store versions up to 5.788. The issue is listed as Patc...

CVE-2024-23501 WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788...

WordPress Plugin Ebook Store Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.788 Fixed in 5.8002 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23501 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1c136e2d77a0 Credits Dragonim Required privilege Administrator...

PT-2024-19903 · Unknown · Ebook Store

Name of the Vulnerable Software and Affected Versions: Ebook Store versions n/a through 5.788 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

The vulnerability of the Xreader software for viewing electronic documents lies in the incorrect restriction on the path name to the restricted access catalog, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Xreader software for viewing electronic documents is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a hacker to execute arbitrary code by having the user open a specially crafted EPUB or CBT...