Read the docs

photonicgnostic

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

photonicgnostic records in CISA KEV

No photonicgnostic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Library Bookshelves 1 record LOW

Records

4 records

TI-2024-35124 CVE-2024-52453 · GHSA-fhcc-h55f-gv4f

WordPress Library Bookshelves plugin <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Reflected XSS.This issue affects Library Bookshelves: f…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-12-02 No fix listed CWE-79
TI-2025-35816 CVE-2025-57964 · GHSA-ffr3-557m-jgc6

WordPress Library Bookshelves Plugin <= 5.11 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Stored XSS.This issue affects Library Bookshelves: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00283 Published 2025-09-22 No fix listed CWE-79
TI-2024-12505 CVE-2024-13464 · GHSA-h4cx-64r2-v654

Library Bookshelves <= 5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Library Bookshelves plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bookshelf' shortcode in all versions up to, and including, 5.10 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00299 Published 2025-02-18 No fix listed CWE-79
TI-2024-10524 CVE-2024-11359 · GHSA-4x6h-xxmf-4966

Library Bookshelves <= 5.8 - Reflected Cross-Site Scripting

Priority LOW 27

The Library Bookshelves plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.8.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2024-12-12 No fix listed CWE-79
Open these records in search →