CVE-2026-39760

HighCVSS 7.1

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

3th percentile - higher than 3% of all known CVEs

Summary

The Real 3D FlipBook plugin in versions up to and including 5.5 is vulnerable to unauthenticated Cross Site Scripting (XSS). Technical details are not provided in the description.

Risk Assessment

An unauthenticated attacker may inject malicious scripts that execute in a user's browser, potentially leading to session theft or other actions in the victim's context. The risk is high due to no login requirement.

Recommendation

Update the Real 3D FlipBook plugin to a version newer than 5.5. Until then, consider disabling the plugin and monitor for unusual user browser behavior.

Other vulnerabilities in Real 3D FlipBook

CVE-2025-68512Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Stored XSS. This issue affects Real 3D FlipBook: from n/a through <= 4.11.4.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS