6.1
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.
Basic Information
ID
CVE-2025-8113
Source
WPScan
Published
Aug 16, 2025 at 06:00
Modified
Aug 18, 2025 at 18:59
Affected Product
Vendor
Unknown
Product
Ebook Store
Affected Versions
Unknown Ebook Store 0