Vulnerabilities > Dearhive
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-03 | CVE-2024-0895 | Cross-site Scripting vulnerability in Dearhive PDF Flipbook, 3D Flipbook The PDF Flipbook, 3D Flipbook – DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline settings in all versions up to, and including, 2.2.26 due to insufficient input sanitization and output escaping on user supplied data. | 5.4 |
| 2024-01-31 | CVE-2024-23505 | Unspecified vulnerability in Dearhive Dearpdf Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive PDF Viewer & 3D PDF Flipbook – DearPDF allows Stored XSS.This issue affects PDF Viewer & 3D PDF Flipbook – DearPDF: from n/a through 2.0.38. | 5.4 |
| 2021-10-18 | CVE-2021-24732 | Cross-site Scripting vulnerability in Dearhive Dearflip The PDF Flipbook, 3D Flipbook WordPress – DearFlip WordPress plugin before 1.7.10 does not escape the class attribute of its shortcode before outputting it back in an attribute, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks | 5.4 |