CVE-2024-1081

Summary

CVE-2024-1081: The 3D FlipBook WordPress plugin, versions up to 1.15.3, is vulnerable to Stored Cross-Site Scripting (XSS). Attackers with contributor-level permissions or higher can exploit this issue via the plugin's bookmark feature, leading to the injection of arbitrary web scripts. These scripts execute whenever an affected user accesses an injected page, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.