Unrated severityNVD Advisory· Published Aug 16, 2025· Updated Aug 18, 2025
Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']
CVE-2025-8113
Description
The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.
Affected products
2<5.8015+ 1 more
- (no CPE)range: <5.8015
- (no CPE)range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/752908b4-7d05-476f-8920-1d0e58fc2983/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.