CVE-2022-45850

The CVE-2022-45850 entry concerns the WordPress plugin Nickys Image Map Pro (premium) with versions prior to 5.6.9. The vulnerability is described as a Cross-Site Request Forgery (CSRF) that enables Stored XSS. Affected component is the plugin’s CSRF handling which, when exploited, can store a sc...

CVE-2022-45850 WordPress Image Map Pro premium plugin < 5.6.9 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro allows Stored XSS.This issue affects Image Map Pro: from n/a before 5.6.9...

WordPress Plugin Image Map Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

GHSA-4JJV-P8X9-RRF7 Joplin Cross-site Scripting vulnerability

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

Joplin Cross-site Scripting vulnerability

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

Design/Logic Flaw

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-37299

Joplin before 2.11.5 allows XSS via an AREA element of an image map...

CVE-2023-3411

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...

CVE-2023-3411

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...

CVE-2023-3412

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0. This is due to a missing capability check on the ajaxstoresave function. This makes it possible for authenticated...

Cross site request forgery (csrf)

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...

Cross site scripting

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0. This is due to a missing capability check on the ajaxstoresave function. This makes it possible for authenticated...

CVE-2023-3411 Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...

CVE-2023-3411 Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing nonce validation on the ajaxstoresave function. This makes it possible for unauthenticated...

CVE-2023-3411

CVE-2023-3411 corresponds to the Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite WordPress plugin. The vulnerability is CSRF due to missing nonce validation on the ajax_store_save() path, enabling unauthenticated attackers to modify plugin settings and inject scripts if a site...

CVE-2023-3412

CVE-2023-3412 affects the WordPress plugin Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite, vulnerable in versions up to and including 1.0.0. The root cause is a missing capability check on the ajax_store_save() function, enabling authenticated attackers with minimal privilege...

CVE-2023-3412 Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Missing Authorization to Stored Cross-Site Scripting

The Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.0. This is due to a missing capability check on the ajaxstoresave function. This makes it possible for authenticated...