CVE-2025-39509

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode TNC FlipBook pdf-viewer-for-wordpress allows Stored XSS.This issue affects TNC FlipBook: from n/a through = 12.1.0...

CVE-2025-39509

The CVE-2025-39509 entry concerns ThemeNcode TNC FlipBook for WordPress (TNC FlipBook) with stored XSS in the web page generation input handling. Affected versions are up to and including 12.1.0 (and earlier). The root cause is improper input neutralization during page generation, enabling stored...