VYPR

Gs Books Showcase

by WordPress

Source repositories

CVEs (2)

  • CVE-2024-11766MedDec 12, 2024
    risk 0.42cvss 6.4epss 0.00

    The WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gs_book_showcase' shortcode in all versions up to, and including, 1.3.1 due to insufficient input…

  • CVE-2023-0541MedFeb 21, 2023
    risk 0.35cvss 5.4epss 0.01

    The GS Books Showcase WordPress plugin before 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site…