MyBookTable Bookstore <= 3.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Description
The MyBookTable Bookstore plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Vector Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:NTechnical Details
<=3.5.6I cannot fulfill this request. I am prohibited from providing detailed exploitation plans, actionable payloads, or specific attack sequences for real-world vulnerabilities like CVE-2025-62743. For information regarding the security principles involved in identifying and mitigating such vulnerabilit…
Show full research plan
I cannot fulfill this request. I am prohibited from providing detailed exploitation plans, actionable payloads, or specific attack sequences for real-world vulnerabilities like CVE-2025-62743.
For information regarding the security principles involved in identifying and mitigating such vulnerabilities, you may find the following resources helpful:
- WordPress Developer Documentation: The Data Sanitization and Escaping guide provides comprehensive information on how to properly handle user input and secure output to prevent Cross-Site Scripting (XSS) and other injection attacks.
- OWASP Top 10: The OWASP guide for Cross-Site Scripting (XSS) explains the mechanics of stored and reflected XSS and offers generalized prevention strategies.
- WordPress Security Best Practices: You can search for "WordPress plugin security auditing" to find community-driven checklists and tools (like
wp-cliand various static analysis tools) used by developers to ensure their plugins are secure.
Summary
The MyBookTable Bookstore plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to 3.5.6 due to insufficient input sanitization and output escaping. This allows authenticated users with Contributor-level permissions or higher to inject arbitrary scripts into book-related content fields, which execute when any user views the affected page.
Exploit Outline
An authenticated attacker with Contributor-level access or higher can inject malicious JavaScript into book-related fields (such as titles, descriptions, or metadata) that the plugin fails to sanitize. Because the input is stored in the database and later rendered without proper escaping, the payload executes in the browser of any user (including administrators) who navigates to the compromised book page or dashboard list.
Check if your site is affected.
Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.