The wppdf.org Responsive flipbook plugin suffers from a stored cross-site scripting vulnerability (CWE-79) due to improper input neutralization during web page generation. This flaw allows an attacker with at least low privileges and requiring user interaction to inject malicious scripts that execute in the security context of other users. The vulnerability affects all versions through 1.0.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, scope changed, and impacts confidentiality, integrity, and availability to a limited extent. No official remediation or patch has been published by the vendor as of the latest information.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the browsers of users who view the affected flipbook content. This can lead to limited confidentiality, integrity, and availability impacts such as session hijacking, defacement, or other malicious actions performed in the context of the victim user. The medium CVSS score reflects these potential impacts combined with the attack complexity and required user interaction.

No official patch or remediation is currently available from the vendor. Users of the Responsive flipbook plugin should monitor the vendor's advisory channels for updates. Until a fix is released, consider restricting user input or disabling the plugin if feasible to reduce exposure. Avoid granting unnecessary privileges to users who can submit content to the flipbook. Review and sanitize inputs where possible as a temporary mitigation.