CVE-2022-1221 Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting

2022-05-2307:15:29

CWE-79

WPScan

www.cve.org

gwyn's imagemap selector

wordpress plugin

0.3.3

reflected cross-site scripting

EPSS

0.001

Percentile

43.5%

JSON

The Gwyn’s Imagemap Selector WordPress plugin through 0.3.3 does not sanitise and escape some parameters before outputting them back in attributes, leading to a Reflected Cross-Site Scripting.

CNA Affected

[
  {
    "product": "Gwyn's Imagemap Selector",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "0.3.3",
        "status": "affected",
        "version": "0.3.3",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/641be9f6-2f74-4386-b16e-4b9488f0d2a9

EPSS

0.001

Percentile

43.5%

JSON

Related for CVELIST:CVE-2022-1221