Ebook Store, CVE-2025-8113
- CVE, Research URL
- Home page URL
- Application
- Published on
- Aug 16, 2025
- Research Description
- The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.
- Affected versions
-
Min -, max 5.8015.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| YDS Support Ticket System (CVE-2024-55985) , Dec 21, 2024 |
| YDS Support Ticket System (CVE-2022-36388) , Jun 10, 2024 |