CVE-2022-0423CWE-79

3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting

published March 21, 2022

CVSS
—
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00600 · 48.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-03-21T18:55Z
EPSS history
Timeline
  • 21 MAR 18:55Z
    3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting
    cvelistv5