CVE-2018-5284

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

PT-2018-16865

Name of the Vulnerable Software and Affected Versions ImageInject plugin version 1.15 Description The issue allows for XSS via the flickr appid parameter to the "/wp-admin/options-general.php" API endpoint. Recommendations For ImageInject plugin version 1.15, avoid using the flickr appid paramete...