CVE-2022-1221
Assigner: WPScan
Published: 2022-05-23T07:15:29
State: PUBLISHED
affected: product: Gwyn's Imagemap Selector
vendor: Unknown
versions: lessThanOrEqual: 0.3.3
status: affected
version: 0.3.3
versionType: custom
credits: value: p7e4
descriptions: value: The Gwyn's Imagemap Selector WordPress plugin through 0.3.3 does not sanitise and escape some parameters before outputting them back in attributes, leading to a Reflected Cross-Site Scripting.
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting
x_generator: WPScan CVE Generator