CVE-2025-68512

MediumCVSS 6.5

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Stored XSS. This issue affects Real 3D FlipBook: from n/a through <= 4.11.4.

Risk Assessment

An attacker with content creation privileges can store a malicious script that executes in visitors' browsers, potentially leading to data theft or session hijacking.

Recommendation

Update the Real 3D FlipBook plugin to a version newer than 4.11.4.

Other vulnerabilities in Real 3D FlipBook

CVE-2026-39760High
The Real 3D FlipBook plugin in versions up to and including 5.5 is vulnerable to unauthenticated Cross Site Scripting (XSS). Technical details are not provided in the description.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Stored XSS.This issue affects Real 3D FlipBook: from n/a through <= 4.11.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS