CVE-2022-4394

CVE-2022-4394: iPages Flipbook For WordPress <= 1.4.6 - Contributor+ Stored XSS

Vendor Unknown
Product iPages Flipbook For WordPress
Published January 9, 2023
Last update April 9, 2025

CVSS base score

What the vulnerability does

01Description

The iPages Flipbook For WordPress plugin through 1.4.6 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Key dates

02Disclosure timeline

January 9, 2023 CVE published
April 9, 2025 Record updated