Medium · 6.5 CVE-2025-57964 EUVD-2025-30690GHSA-ffr3-557m-jgc6

WordPress Library Bookshelves Plugin <= 5.11 - Cross Site Scripting (XSS) Vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: photonicgnostic Product: Library Bookshelves

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in photonicgnostic Library Bookshelves library-bookshelves allows Stored XSS.This issue affects Library Bookshelves: from n/a through <= 5.11.

Affected products

Vendor	Product	Affected	Fixed
photonicgnostic	Library Bookshelves	≤ 5.11	—

References

https://patchstack.com/database/Wordpress/Plugin/library-bookshelves/vulnerability/wordpress-library-bookshelves-plugin-5-11-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry