Stored Cross-Site Scripting Vulnerability in Library Bookshelves Plugin for WordPress
CVE-2024-13464
5.4MEDIUM
What is CVE-2024-13464?
The Library Bookshelves plugin for WordPress has a vulnerability that allows authenticated users with contributor-level access and above to exploit the 'bookshelf' shortcode. Due to the lack of proper input sanitization and output escaping for user-supplied attributes, malicious scripts can be injected into pages. When other users access those pages, the injected scripts execute, potentially compromising their data and security.
Affected Version(s)
Library Bookshelves * <= 5.9