Lucene search
+L

297 matches found

Cvelist
Cvelist
added 2024/05/02 8:32 a.m.33 views

CVE-2024-3883 3D FlipBook <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and...

6.4CVSS6AI score0.00323EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/05/02 2:37 a.m.7 views

WordPress 3D FlipBook plugin <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL vulnerability

Authenticated Author+ Stored Cross-Site Scritping via Bookmark URL vulnerability discovered by Tim Coen in WordPress Plugin 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions = 1.15.4...

6.4CVSS6.3AI score0.00323EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/02 12:00 a.m.16 views

PT-2024-28236 · WordPress · 3D Flipbook

Name of the Vulnerable Software and Affected Versions: 3D FlipBook plugin for WordPress versions up to, and including, 1.15.4 Description: The issue is related to Stored Cross-Site Scripting via the Bookmark URL field due to insufficient input sanitization and output escaping. This allows...

6.4CVSS5.8AI score0.00323EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2024/05/02 12:00 a.m.22 views

WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.15.4 is vulnerable to Cross Site Scripting (XSS)

Software 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Type Plugin Vulnerable versions = 1.15.4 Fixed in 1.15.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-3883 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5fa01e38a65b...

6.4CVSS6.6AI score0.00323EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/05/02 12:00 a.m.13 views

WordPress plugin 3D FlipBook 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.2AI score0.00323EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/04/29 1:45 p.m.11 views

WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin iPages Flipbook versions = 1.5.1...

7AI score0.00249EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/29 12:00 a.m.15 views

WordPress iPages Flipbook Plugin <= 1.5.1 is vulnerable to Broken Access Control

Software iPages Flipbook Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33909 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 75f60d56e4ee Credits Steven Julian Required...

6.6AI score0.00249EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/24 12:00 a.m.10 views

3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin < 3.63 - Reflected Cross-Site Scripting

Description The 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 3.62 due to insufficient input sanitization and output escaping. This makes it possible for...

7.1CVSS6.5AI score0.00371EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/22 7:48 a.m.31 views

CVE-2024-32694 WordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Reflected XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...

7.1CVSS7.1AI score0.00371EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/22 12:00 a.m.10 views

PT-2024-24780 · WordPress · 3D Flipbook

Name of the Vulnerable Software and Affected Versions: 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin versions n/a through 3.62 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This...

7.1CVSS5.7AI score0.00371EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/22 12:00 a.m.7 views

WordPress plugin Real 3D FlipBook 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00371EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/19 2:09 p.m.7 views

WordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Real 3D FlipBook versions = 3.62...

7.1CVSS6.1AI score0.00371EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/19 12:00 a.m.13 views

WordPress 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin Plugin <= 3.62 is vulnerable to Cross Site Scripting (XSS)

Software 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin Type Plugin Vulnerable versions = 3.62 Fixed in 3.63 OWASP Top 10 A1: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32694 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PS...

7.1CVSS6.5AI score0.00371EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/17 12:00 a.m.13 views

Digital Publications by Supsystic < 1.7.8 - Cross-Site Request Forgery

Description The WordPress Flipbook by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.7. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perfor...

4.3CVSS6.7AI score0.00212EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/04/15 12:00 a.m.6 views

WordPress Plugin WordPress Flipbook by Supsystic 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WordPress...

4.3CVSS6.6AI score0.00212EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2024/04/04 12:00 a.m.18 views

Responsive flipbook <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Responsive flipbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/31 8:15 p.m.32 views

CVE-2024-30552

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wppdf.Org Responsive flipbook allows Stored XSS.This issue affects Responsive flipbook: from n/a through 1.0.0...

6.5CVSS6.4AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/31 7:53 p.m.76 views

CVE-2024-30552

Technical details for CVE-2024-30552 are not provided in the supplied documents. Monitor for updates on affected products/versions and remediation.

6.5CVSS8.6AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/31 7:53 p.m.47 views

CVE-2024-30552 WordPress Responsive flipbook plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wppdf.Org Responsive flipbook allows Stored XSS.This issue affects Responsive flipbook: from n/a through 1.0.0...

6.5CVSS6.6AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/31 12:00 a.m.13 views

WordPress Plugin Responsive flipbook 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Responsive flipbook A...

6.5CVSS7.5AI score0.00331EPSS
SaveExploits0References2
Rows per page
Query Builder