Weblibrarian Vulnerabilities

The WebLibrarian plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 3.5.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute i...

CVSS:

6.1

Affected:

up to 3.5.8.1

Fixed in:

3.5.8.2

Disclosed:

Aug 14, 2023

CVE-2023-29441 on NVD →

Deepwoods Software WebLibrarian 3.5.4 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function "AllBarCodes" (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in...

CVSS:

8.8

Affected:

up to 3.5.4

Fixed in:

3.5.5

Disclosed:

Jul 16, 2019

CVE-2019-1010034 on NVD →

The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.

CVSS:

6.1

Affected:

up to 3.4.8.7

Fixed in:

3.4.8.7

Disclosed:

Jul 25, 2017

CVE-2017-18540 on NVD →

The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes.

CVSS:

6.1

Affected:

up to 3.4.8.6

Fixed in:

3.4.8.6

Disclosed:

Jul 25, 2017

CVE-2017-18539 on NVD →

The weblibrarian plugin before 3.4.8.5 for WordPress has XSS via front-end short codes.

CVSS:

6.1

Affected:

up to 3.4.8.5

Fixed in:

3.4.8.5

Disclosed:

Jul 20, 2017

CVE-2017-18538 on NVD →