Lucene search
Wpl0v3rPATCHSTACK:9A68F024F5E6481C9D32A5F2CEFA7638HistoryJan 09, 2018 - 12:00 a.m.
WordPress ImageInject plugin 1.15 - Stored Cross-Site Scripting vulnerability
2018-01-0900:00:00
wpl0v3r
patchstack.com
3
0.001 Low
EPSS
Percentile
28.5%
Stored Cross-Site Scripting vulnerability found by wpl0v3r in WordPress ImageInject plugin (version 1.15). Vulnerable via the flickr_appid parameter to wp-admin/options-general.php.
Solution
1/9/2018 - we were unable to find a patched version of the plugin. Dangerous to use.
| CPE | Name | Operator | Version |
|---|---|---|---|
| imageinject | eq | 1.15 |
Related
prion
prion
Design/Logic Flaw
2018-01-08 07:29:00
nvd
nvd
CVE-2018-5284
2018-01-08 07:29:00
cve
cve
CVE-2018-5284
2018-01-08 07:29:00
cvelist
cvelist
CVE-2018-5284
2018-01-08 07:00:00
openvas
openvas
WordPress ImageInject Plugin < 1.16 Multiple Vulnerabilities
2018-01-09 00:00:00
wpvulndb
wpvulndb
ImageInject <= 1.15 - Stored XSS & CSRF
2018-01-04 00:00:00