139 matches found
CVE-2024-32779 WordPress Vision – Image Map Builder plugin <= 1.7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Avirtum Vision Interactive.This issue affects Vision Interactive: from n/a through 1.7.1...
CVE-2022-45850
Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro allows Stored XSS.This issue affects Image Map Pro: from n/a before 5.6.9...
CVE-2022-45850 WordPress Image Map Pro premium plugin < 5.6.9 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS)
Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro allows Stored XSS.This issue affects Image Map Pro: from n/a before 5.6.9...
CVE-2022-45850 WordPress Image Map Pro premium plugin < 5.6.9 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS)
Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro allows Stored XSS.This issue affects Image Map Pro: from n/a before 5.6.9...
CVE-2022-45850
The CVE-2022-45850 entry concerns the WordPress plugin Nickys Image Map Pro (premium) with versions prior to 5.6.9. The vulnerability is described as a Cross-Site Request Forgery (CSRF) that enables Stored XSS. Affected component is the plugin’s CSRF handling which, when exploited, can store a sc...
CVE-2022-45850: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro allows Stored XSS.This issue affects Image Map Pro: from n/a before 5.6.9...
WordPress Plugin Image Map Pro 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
Joplin Cross-site Scripting vulnerability
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
GHSA-4JJV-P8X9-RRF7 Joplin Cross-site Scripting vulnerability
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
Design/Logic Flaw
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37299: Improper Neutralization of Input During Web Page Generation
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-37299
Joplin before 2.11.5 allows XSS via an AREA element of an image map...
CVE-2023-3412
The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0. This is due to a missing capability check on the ajaxstoresave function. This makes it possible for authenticated...
CVE-2023-3411
The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...
CVE-2023-3411
The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...
Cross site request forgery (csrf)
The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...