CVE-2021-25031

The Image Hover Effects Ultimate Image Gallery, Effects, Lightbox, Comparison or Magnifier WordPress plugin before 9.7.1 does not escape the effects parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-25031: Improper Neutralization of Input During Web Page Generation

The Image Hover Effects Ultimate Image Gallery, Effects, Lightbox, Comparison or Magnifier WordPress plugin before 9.7.1 does not escape the effects parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting...

PT-2022-9588

Name of the Vulnerable Software and Affected Versions Image Hover Effects Ultimate WordPress plugin versions prior to 9.7.1 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the effects parameter is not properly escaped before being outputted back in ...