CVE-2023-5507 ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The ImageMapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'imagemap' shortcode in versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2023-5507

CVE-2023-5507 affects the WordPress ImageMapper plugin (imagemapper) and its shortcode, vulnerable through insufficient input sanitization and output escaping in shortcode attributes. Affected versions are up to 1.2.6. The issue enables stored cross-site scripting (XSS) by authenticated users wit...

WordPress ImageMapper Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software ImageMapper Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5507 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dd6f49b1b90c Credits Lana Codes Required privilege...