CVE 6.1 MEDIUM

Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']_CVE-2025-8113

6.1 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.

Basic Information

ID CVE-2025-8113
Source WPScan
Published Aug 16, 2025 at 06:00
Modified Aug 18, 2025 at 18:59

Affected Product

Vendor Unknown
Product Ebook Store
Affected Versions Unknown Ebook Store 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.