Stored Cross-Site Scripting in Responsive FlipBook Plugin for WordPress

CVE-2024-11929

What is CVE-2024-11929?

The Responsive FlipBook Plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping in the rfbwp_save_settings() function. This vulnerability affects all versions up to and including 2.5.0, allowing authenticated users with Subscriber-level access or higher to inject arbitrary web scripts into web pages. Such scripts can execute whenever a user accesses the compromised page, potentially leading to unauthorized actions or data exposure.

References