Lucene search
+L

74 matches found

CNNVD
CNNVD
added 2023/06/27 12:0 a.m.11 views

WordPress Plugin Image Map Pro–Drag-and-drop Builder for Interactive Images–Lite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.1CVSS6.2AI score0.00253EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
added 2023/06/26 12:0 a.m.22 views

Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite < 1.0.0 - Subscriber+ Stored XSS

The plugin does not sanitize and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks...

6.4CVSS5.8AI score0.00352EPSS
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
added 2023/06/26 12:0 a.m.16 views

Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite < 1.0.0 - CSRF to Stored XSS

The plugin does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack...

6.1CVSS6.1AI score0.00253EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2023/05/10 12:15 p.m.5 views

CVE-2022-45846

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/10 12:15 p.m.19 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

6.8CVSS8.8AI score0.00253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/10 11:8 a.m.35 views

CVE-2022-45846 WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

5.4CVSS9.1AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/10 11:8 a.m.49 views

CVE-2022-45846

The CVE-2022-45846 entry concerns Nickys Image Map Pro for WordPress – Interactive SVG Image Map Builder plugin, vulnerable to Cross-Site Request Forgery (CSRF) in versions older than 5.6.9. Multiple connected sources corroborate a CSRF condition in this plugin prior to 5.6.9, with public advisor...

8.8CVSS7.2AI score0.00253EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/10 11:8 a.m.7 views

CVE-2022-45846 WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin 5.6.9 versions...

5.4CVSS7.2AI score0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/10 12:0 a.m.7 views

PT-2023-14781 · WordPress · Nickys Image Map Pro

Name of the Vulnerable Software and Affected Versions: Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin versions prior to 5.6.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick...

8.8CVSS8.5AI score0.00253EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.10 views

WordPress plugin Image Map Pro 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...

8.8CVSS7.8AI score0.00253EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2022/11/23 12:0 a.m.39 views

WordPress Image Map Pro premium plugin <= 5.5.0 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF leading to Stored Cross-Site Scripting XSS discovered by Dave Jong Patchstack in the WordPress Image Map Pro premium plugin versions = 5.5.0. Solution No patched version is available. No reply from the vendor for a long time...

1.8AI score0.00229EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2022/11/23 12:0 a.m.29 views

WordPress Image Map Pro premium plugin <= 5.5.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by Dave Jong Patchstack in the WordPress Image Map Pro premium plugin versions = 5.5.0. Solution No patched version is available. No reply from the vendor for a long time...

2.6AI score0.00253EPSS
SaveExploits0Affected Software1
Vulnerability Lab
Vulnerability Lab
added 2017/06/12 12:0 a.m.99 views

123ContactForm - Cross Site Scripting Web Vulnerability

Document Title: =============== 123ContactForm - Cross Site Scripting Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1982 Ref: 123-1476631846 Release Date: ============= 2017-06-12 Vulnerability Laboratory ID VL-ID:...

7.1AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
added 2017/06/11 12:0 a.m.41 views

123ContactForm - Cross Site Scripting Web Vulnerability

Document Title: =============== 123ContactForm - Cross Site Scripting Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1982 Ref: 123-1476631846 Release Date: ============= 2017-06-11 Vulnerability Laboratory ID VL-ID:...

7.4AI score
SaveExploits0
Rows per page
Query Builder