https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:03:57.954997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-0423 CVE-2022-0423 — 3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting 2026-10-06T15:03:57.970763+00:00

Affected: Unknown 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook.