CVE-2022-0423

5.4 mediumEPSS 0.6%

Medium (5.4) in 3dflipbook 3d flipbook. EPSS 0.6% chance of exploitation in the next 30 days.

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

3dflipbook:3d_flipbook

References

https://wpscan.com/vulnerability/7dde0b9d-9b86-4961-b005-a11b6ffba952
https://wpscan.com/vulnerability/7dde0b9d-9b86-4961-b005-a11b6ffba952

Check your stack JSON