THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-8623 (MEDIUM 6.4) — The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dvcss element)' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanit

[NVD] CVE-2026-8623 (MEDIUM 6.4) — The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dvcss element)' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanit

mednvdPublished 2026-09-05

CVE-2026-8623 CVSS: 6.4 MEDIUM Published: 2026-09-05T06:17:10.547

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dvcss element)' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output escaping. This makes it possible f

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8623