Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-46776
HistoryMay 25, 2022 - 12:00 a.m.

WordPress Imagemap Selector plugin跨站脚本漏洞

2022-05-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Imagemap Selector plugin, which stems from the plugin’s failure to clean up and escape parameters before exporting them back to the properties of the administrative page, which could be exploited by an attacker to cause a reflected cross-site scripting attack. can exploit this vulnerability to cause a reflected cross-site scripting attack.