PT-2026-5610 · WordPress · Library Viewer
CVE-2025-15396
·
Publicado
2026-02-02
·
Atualizado
2026-02-07
CVSS v3.1
7.1
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Library Viewer WordPress plugin versions prior to 3.2.0
Description
The software does not properly sanitize and escape parameters before outputting them, resulting in a Reflected Cross-Site Scripting issue. This could potentially be used to target users with high privileges, such as administrators.
Recommendations
Update to version 3.2.0 or later.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Library Viewer