Lucene search
K

22 matches found

Nuclei
Nuclei
added 2026/05/28 5:39 a.m.13 views

FlexPaper/FlowPaper 2.3.6 - Remote Code Execution

The Publish Service in FlexPaper later renamed FlowPaper 2.3.6 allows remote code execution via setup.php and changeconfig.php. id: CVE-2018-11686 info: name: FlexPaper/FlowPaper 2.3.6 - Remote Code Execution author: iamnoooob,pdresearch,pszyszkowski severity: critical description: | The Publish...

9.8CVSS7.9AI score0.92639EPSS
Exploits4References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:24 a.m.3 views

CVE-2023-40197

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Devaldi Ltd flowpaper plugin = 1.9.9 versions...

6.5CVSS5.6AI score0.00105EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-44794

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00105EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2023/11/14 12:0 a.m.2 views

VulnCheck KEV: CVE-2018-11686

The Publish Service in FlexPaper later renamed FlowPaper 2.3.6 allows remote code execution via setup.php and changeconfig.php...

9.8CVSS7.8AI score0.92639EPSS
Exploits4References1
OSV
OSV
added 2023/10/20 7:15 a.m.1 views

CVE-2023-5200

The flowpaper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'flipbook' shortcode in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

5.4CVSS7AI score
Exploits0References3
NVD
NVD
added 2023/10/20 7:15 a.m.5 views

CVE-2023-5200

The flowpaper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'flipbook' shortcode in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS5.7AI score0.00176EPSS
Exploits0References3
Prion
Prion
added 2023/10/20 7:15 a.m.8 views

Cross site scripting

The flowpaper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'flipbook' shortcode in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

4.9CVSS5AI score0.00176EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2023/10/20 6:35 a.m.34 views

CVE-2023-5200

CVE-2023-5200 refers to a stored XSS in the WordPress plugin flowpaper (flowpaper-lite-pdf-flipbook). Affected versions are up to and including 2.0.3. The vulnerability stems from insufficient input sanitization and output escaping on user-supplied shortcode attributes, allowing an attacker with ...

6.4CVSS5.3AI score0.00176EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.1 views

WordPress Plugin flowpaper Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.4CVSS6AI score0.00176EPSS
Exploits0References4
Patchstack
Patchstack
added 2023/09/26 12:0 a.m.8 views

WordPress flowpaper Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software flowpaper Type Plugin Vulnerable versions = 2.0.3 Fixed in 2.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5200 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fa939bd6216f Credits Lana Codes Required privilege...

6.4CVSS6AI score0.00176EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2023/09/04 12:15 p.m.7 views

CVE-2023-40197

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Devaldi Ltd flowpaper plugin = 1.9.9 versions...

6.5CVSS5.8AI score0.00105EPSS
Exploits0References1
OSV
OSV
added 2023/09/04 12:15 p.m.0 views

CVE-2023-40197

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Devaldi Ltd flowpaper plugin = 1.9.9 versions...

5.4CVSS7.3AI score0.00105EPSS
Exploits0References1
Prion
Prion
added 2023/09/04 12:15 p.m.10 views

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Devaldi Ltd flowpaper plugin = 1.9.9 versions...

4.9CVSS5.2AI score0.00105EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/04 11:27 a.m.14 views

CVE-2023-40197 WordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Devaldi Ltd flowpaper plugin = 1.9.9 versions...

6.5CVSS6AI score0.00105EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/09/04 11:27 a.m.8 views

CVE-2023-40197 WordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Devaldi Ltd flowpaper plugin = 1.9.9 versions...

6.5CVSS5.6AI score0.00105EPSS
Exploits0References1
CVE
CVE
added 2023/09/04 11:27 a.m.38 views

CVE-2023-40197

CVE-2023-40197 is a Stored XSS vulnerability in Devaldi Ltd Flowpaper Plugin for WordPress, affecting flowpaper plugin versions = 2.0.0 to mitigate.

6.5CVSS5.5AI score0.00105EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/09/04 12:0 a.m.1 views

WordPress plugin flowpaper cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6.1AI score0.00105EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/08/11 12:0 a.m.8 views

WordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

Software flowpaper Type Plugin Vulnerable versions = 1.9.9 Fixed in 2.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40197 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 17268f077903 Credits Mika Required privilege...

6.5CVSS5.7AI score0.00105EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/07/03 5:15 p.m.0 views

CVE-2018-11686

The Publish Service in FlexPaper later renamed FlowPaper 2.3.6 allows remote code execution via setup.php and changeconfig.php...

9.8CVSS6.3AI score
Exploits0References2
Prion
Prion
added 2019/07/03 5:15 p.m.12 views

Remote code execution

The Publish Service in FlexPaper later renamed FlowPaper 2.3.6 allows remote code execution via setup.php and changeconfig.php...

7.5CVSS9.8AI score0.92639EPSS
Exploits4References2Affected Software1
Rows per page
Query Builder