Read the docs

Fotobook Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Fotobook Project records in CISA KEV

No Fotobook Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fotobook 1 record LOW

Records

1 record in Fotobook · all components

TI-2022-00305 CVE-2022-0380 · GHSA-8f2f-h9hr-hqj6

Fotobook <= 3.2.3 Reflected Cross-Site Scripting

Priority LOW 29

The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arb…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00866 Published 2022-02-04 No fix listed CWE-79
Open these records in search →