6.4 Medium

CVE-2024-11766 The WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more plugin for WordPress is…

Description

The WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gs_book_showcase' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affected products and versions

Product	Affected versions	Fixed in
WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more 1.3	earliest → 1.3.1	No fix stated
GS Books Showcase – Display Books in Grid, Slider & More \| Library for WordPress 1.3	earliest → 1.3.1	No fix stated

Do you use WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more?

Track this CVE Watch WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more Check my SBOMs

www.cveye.io/en/cve/CVE-2024-11766

Timeline

Published December 12, 2024
Last modified April 8, 2026

References

www.wordfence.com www.wordfence.com
plugins.trac.wordpress.org plugins.trac.wordpress.org
plugins.trac.wordpress.org plugins.trac.wordpress.org

Track this CVE