WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting

Wordpress Gwyn's Imagemap Selector plugin 0.3.3 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize the id and class parameters before returning them back in attributes. id: CVE-2022-1221 info: name: WordPress Gwyn's Imagemap Selector =0.3.3 - Cross-Site...

CVE-2022-1221

creationtimestamp| type| source ---|---|--- 2022-05-23 12:35:30+00:00| seen| https://t.me/cibsecurity/43145 2025-07-08 21:02:40+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75jiwgb2d...

CVE-2022-1221

The Gwyn's Imagemap Selector WordPress plugin (versions 0.3.3 and prior ) contains a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitize and escape the id and class parameters before they are outputted back into attributes. Successful exploitation could a...