Flowpaper

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Flowpaper records in CISA KEV

No Flowpaper vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pdf2json 18 records MEDIUM Flexpaper 3 records HIGH Flowpaper 2 records LOW

Records

2 records in Flowpaper · all components

TI-2023-21067 CVE-2023-40197 · GHSA-r5ch-8hvg-m2jx

WordPress flowpaper Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Devaldi Ltd flowpaper plugin <= 1.9.9 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00361 Published 2023-09-04 No fix listed CWE-79

TI-2023-04787 CVE-2023-5200 · GHSA-9jhj-p8jf-q52w

flowpaper <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The flowpaper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'flipbook' shortcode in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00527 Published 2023-10-20 No fix listed CWE-79

Open these records in search →

Critical	2
High	4
Medium	17
Low	0
No CVSS	0