Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Library Viewer WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-02 | 2 | Disclosure1General1 |
| 2026-02-07 | 1 | Disclosure1 |
CVE-2025-15396 The Library Viewer WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Si… https://www.cve.org/CVERecord?id=CVE-2025-15396
Post summary
The post notes a reflected XSS flaw in the Library Viewer WordPress plugin caused by unsanitized parameters, but provides no PoC, exploit, or patch details.
CVE-2025-15396 (CVSS:7.1, HIGH) is Awaiting Analysis. The Library Viewer WordPress plugin before 3.2.0 does not sanitise and escape some parameters before outputting them bac..https://nvd.nist.gov/vuln/detail/CVE-2025-15396 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2025‑15396, a high‑severity issue in the Library Viewer WordPress plugin that lacks input sanitization, and indicates the vulnerability is still awaiting analysis.
CVE-2025-15396 Reflected Cross-Site Scripting Vulnerability in Library Viewer WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15396
Post summary
The brief notice announces a reflected XSS vulnerability (CVE-2025-15396) in the Library Viewer WordPress plugin, without mentioning any PoC, exploit code, active exploitation, patch, or debunking claim.