CVE-2025-8113 Information

Aug 17, 2025 cve

Description

The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER[‘REQUEST_URI’] parameter before outputting it back in an attribute which could lead to Reflected Cross-Site Scripting in old web browsers.

Reference

https://wpscan.com/vulnerability/752908b4-7d05-476f-8920-1d0e58fc2983/

CNNVD-202508-1914 (Published: 2025-08-16)

Share on: