Security Advisory

CVE-2022-0423

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-21 18:55:45

Last updated 2024-08-02 23:25:40

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook.

← Browse all CVEs View on cve.org ↗