Lucene search
+L

139 matches found

Patchstack
Patchstack
•added 2023/06/05 12:00 a.m.•23 views

WordPress Page Builder with Image Map by AZEXO Plugin <= 1.27.133 is vulnerable to Cross Site Request Forgery (CSRF)

Software Page Builder with Image Map by AZEXO Type Plugin Vulnerable versions = 1.27.133 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-3052 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 3ed12ddc506d Credit...

8.8CVSS7AI score0.00317EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/05/10 12:15 p.m.•15 views

CVE-2022-45846

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
NVD
NVD
•added 2023/05/10 12:15 p.m.•47 views

CVE-2022-45846

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

8.8CVSS6.5AI score0.00253EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/10 12:15 p.m.•32 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

6.8CVSS8.8AI score0.00253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/05/10 11:08 a.m.•46 views

CVE-2022-45846 WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

5.4CVSS9.1AI score0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/10 11:08 a.m.•12 views

CVE-2022-45846 WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

5.4CVSS7.2AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/10 11:08 a.m.•66 views

CVE-2022-45846

The CVE-2022-45846 entry concerns Nickys Image Map Pro for WordPress – Interactive SVG Image Map Builder plugin, vulnerable to Cross-Site Request Forgery (CSRF) in versions older than 5.6.9. Multiple connected sources corroborate a CSRF condition in this plugin prior to 5.6.9, with public advisor...

8.8CVSS7.2AI score0.00253EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/05/10 12:00 a.m.•22 views

WordPress plugin Image Map Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

8.8CVSS7.8AI score0.00253EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•16 views

PT-2023-14781 · WordPress · Nickys Image Map Pro

Name of the Vulnerable Software and Affected Versions: Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin versions prior to 5.6.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick...

8.8CVSS8.5AI score0.00253EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/10 12:00 a.m.•6 views

CVE-2022-45846: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/28 9:15 a.m.•16 views

CVE-2023-25704

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin = 1.0 versions...

4.8CVSS6.6AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/28 9:15 a.m.•33 views

CVE-2023-25704

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin = 1.0 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/28 9:15 a.m.•26 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin = 1.0 versions...

4.3CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2023/03/28 8:19 a.m.•7 views

CVE-2023-25704

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin = 1.0 versions...

5.9CVSS0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/03/28 12:00 a.m.•18 views

WordPress Plugin Interactive SVG Image Map Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/28 12:00 a.m.•4 views

CVE-2023-25704: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugin = 1.0 versions...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/28 12:00 a.m.•17 views

PT-2023-20257 · Unknown · Mehjabin Orthi Interactive Svg Image Map Builder

Name of the Vulnerable Software and Affected Versions: Mehjabin Orthi Interactive SVG Image Map Builder plugin versions = 1.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. This vulnerability affects the...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 6:20 a.m.•19 views

SUSE CVE-2004-0527

KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack...

5CVSS7AI score0.05762EPSS
SaveExploits2References3
WPVulnDB
WPVulnDB
•added 2023/02/14 12:00 a.m.•17 views

Interactive SVG Image Map Builder < 1.1 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS4.8AI score0.00369EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2023/02/14 12:00 a.m.•21 views

WordPress Interactive SVG Image Map Builder Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Interactive SVG Image Map Builder Type Plugin Vulnerable versions = 1.0 Fixed in 1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25704 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9e6397036265 Credits Lokesh...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder