Cross site request forgery (csrf)

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

CVE-2018-5284

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

CVE-2018-5285

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

Design/Logic Flaw

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

CVE-2018-5284

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

CVE-2018-5284

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

CVE-2018-5285

The CVE-2018-5285 entry concerns WordPress ImageInject plugin (version 1.15) with CSRF via wp-admin/options-general.php. Public docs describe vulnerability in ImageInject for WordPress, enabling cross-site requests through the options-general page, potentially enabling unauthorized operations. Re...

CVE-2018-5284

CVE-2018-5284 affects the WordPress plugin ImageInject, version 1.15. The vulnerability is a stored cross-site scripting (XSS) via the flickr_appid parameter on wp-admin/options-general.php. Root cause is input handling insufficient to neutralize script payloads in this parameter. Documented impa...

CVE-2018-5285

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

WordPress ImageInject plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.ImageInject plugin is used in one of the image upload plugin. A cross-site scripting vulnerability exists in versi...

WordPress ImageInject plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.ImageInject plugin is used in one of the image upload plugin. A cross-site request forgery vulnerability exists in...

CVE-2018-5285: Cross-Site Request Forgery (CSRF)

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

CVE-2018-5284: Improper Neutralization of Input During Web Page Generation

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

PT-2018-16865

Name of the Vulnerable Software and Affected Versions ImageInject plugin version 1.15 Description The issue allows for XSS via the flickr appid parameter to the "/wp-admin/options-general.php" API endpoint. Recommendations For ImageInject plugin version 1.15, avoid using the flickr appid paramete...

ImageInject <= 1.15 - Stored XSS & CSRF

The ImageInject WordPress plugin was affected by a Stored XSS & CSRF security vulnerability...

PT-2018-16866

Name of the Vulnerable Software and Affected Versions ImageInject plugin version 1.15 for WordPress Description The issue concerns a CSRF vulnerability. It affects the wp-admin/options-general.php API endpoint. Recommendations For ImageInject plugin version 1.15, consider disabling access to the...