Vulnerabilities

TI-2023-13821 CVE-2023-29441 · GHSA-22mg-hprw-43g2

WordPress WebLibrarian Plugin <= 3.5.8.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Robert Heller WebLibrarian plugin <= 3.5.8.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00379 Published 2023-09-06 No fix listed CWE-79

TI-2017-13713 CVE-2017-18540 · GHSA-q833-2669-qpm8

LOW 29

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00916 Published 2019-08-21 No fix listed CWE-79

TI-2017-13712 CVE-2017-18539 · GHSA-qf6g-2vj6-4q65

LOW 29

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00888 Published 2019-08-21 No fix listed CWE-79

TI-2017-13711 CVE-2017-18538 · GHSA-v775-c4m3-q2r5

LOW 29

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00916 Published 2019-08-21 No fix listed CWE-79

TI-2019-15959 CVE-2019-1010034 · GHSA-r2hp-7g54-pv76

LOW 32

Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01401 Published 2019-07-15 No fix listed CWE-89