CVE-2025-48156 WordPress Image Wall plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Parakoos Image Wall allows Stored XSS. This issue affects Image Wall: from n/a through 3.1...

WordPress plugin Image Wall has a cross-site scripting vulnerability

WordPress Image Wall is a WordPress plugin that allows users to browse blog posts or page content via images. WordPress Image Wall suffers from a cross-site scripting vulnerability that stems from improper input neutralization, which can be exploited by an attacker to execute a phishing attack by...

CVE-2025-30869

CVE-2025-30869 is a Reflected XSS in the Image Wall WordPress plugin. Affected software: Image Wall (WordPress) up to version 3.0. Root cause: improper neutralization of input during web-page generation. Impact per the CVSS: high likelihood of client-side script execution with Confidentiality, In...