Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:8 p.m.1 views

CVE-2026-2569

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6AI score0.00043EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 11:21 p.m.1 views

CVE-2026-2569

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/10 11:21 p.m.0 views

CVE-2026-2569 Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References2
CVE
CVE
added 2026/03/10 11:21 p.m.11 views

CVE-2026-2569

The CVE-2026-2569 entry corresponds to the WordPress plugin Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer (3d-flipbook-dflip-lite) with a Stored Cross-Site Scripting flaw via PDF page labels in all versions up to 2.4.20. The issue is caused by insufficient input sanitization an...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/10 11:21 p.m.26 views

CVE-2026-2569 Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00043EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/03/10 10:11 p.m.3 views

WordPress Dear Flipbook plugin <= 2.4.20 - Authenticated (Author+) Stored Cross-Site Scripting via PDF Page Labels vulnerability

Authenticated Author+ Stored Cross-Site Scripting via PDF Page Labels vulnerability discovered by Drew Webber mcdruid in WordPress Plugin DearFlip versions = 2.4.20...

6.4CVSS5.8AI score0.00043EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.2 views

PT-2026-24506

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References3
WPVulnDB
WPVulnDB
added 2026/03/10 12:0 a.m.7 views

Dear Flipbook < 2.4.27 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels

Description The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient input sanitization and output escaping. This makes it possible fo...

6.4CVSS5.9AI score0.00043EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:7 a.m.1 views

SUSE CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.5CVSS7AI score0.00368EPSS
Exploits1References3
OSV
OSV
added 2019/10/01 4:15 p.m.2 views

CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.5CVSS6.1AI score0.00368EPSS
Exploits1References4
OSV
OSV
added 2019/10/01 4:15 p.m.0 views

UBUNTU-CVE-2019-17064

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor...

5.5CVSS6AI score0.00368EPSS
Exploits1References4
Rows per page
Query Builder