WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting

Wordpress Gwyn's Imagemap Selector plugin 0.3.3 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize the id and class parameters before returning them back in attributes. id: CVE-2022-1221 info: name: WordPress Gwyn's Imagemap Selector =0.3.3 - Cross-Site...

CVE-2022-1221

creationtimestamp| type| source ---|---|--- 2022-05-23 12:35:30+00:00| seen| https://t.me/cibsecurity/43145 2025-07-08 21:02:40+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75jiwgb2d...

CVE-2022-1221

Summary: CVE-2022-1221 affects the WordPress Gwyn’s Imagemap Selector plugin (versions up to 0.3.3). The vulnerability is a reflected Cross‑Site Scripting (XSS) due to insufficient sanitisation/escaping of parameters (notably id and class) when outputting attributes. This can allow an attacker to...