CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery allows Stored XSS.This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery: from n/a through 1.15.6.
Explanation of Vulnerability in Simple Terms
The 3D FlipBook plugin contains a stored cross-site scripting (XSS) vulnerability in versions up to 1.15.6. An authenticated user with high privileges can inject malicious JavaScript that executes in the browsers of other users viewing the flipbook. The vulnerability requires user interaction and affects the integrity and confidentiality of site data.
What an attacker can do
Inject malicious JavaScript that runs in other users' browsers when they view a flipbook.
Potential impact on your site
A compromised admin account could inject malicious scripts affecting all site visitors viewing flipbooks.
Conditions required to exploit
Attacker must have high-level admin or editor privileges and the victim must view the affected flipbook.
Key dates
External resources
Related vulnerabilities
