Real 3D Flipbook
Monthly
Unauthenticated reflected cross-site scripting (XSS) in the WordPress plugin Real 3D FlipBook versions 5.5 and earlier allows remote attackers to inject arbitrary script into a victim's browser session via a crafted link, requiring user interaction (UI:R) such as clicking the link. No authentication is required (PR:N), and the flaw is network-reachable (AV:N) with low complexity (AC:L), but impact is limited to the victim's browser context with no server-side compromise. Our independent assessment adjusts the availability impact to none (A:N), yielding a CVSS 3.1 base score of 6.1 rather than the vendor's 7.1; no public exploit code or active exploitation is identified at time of analysis.
Unauthenticated reflected cross-site scripting (XSS) in the WordPress plugin Real 3D FlipBook versions 5.5 and earlier allows remote attackers to inject arbitrary script into a victim's browser session via a crafted link, requiring user interaction (UI:R) such as clicking the link. No authentication is required (PR:N), and the flaw is network-reachable (AV:N) with low complexity (AC:L), but impact is limited to the victim's browser context with no server-side compromise. Our independent assessment adjusts the availability impact to none (A:N), yielding a CVSS 3.1 base score of 6.1 rather than the vendor's 7.1; no public exploit code or active exploitation is identified at time of analysis.