imagemapper project records

4 published records for vendor imagemapper project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2023-5507No exploit	ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeimagemapper project · imagemapper · CWE-79 XSS	Medium5.4	—	0.4%	Nov 7, 2023
17Monitor	CVE-2023-5506No exploit	ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajaximagemapper project · imagemapper · CWE-862 Broken access control (IDOR)	Medium4.3	—	0.4%	Nov 7, 2023
17Monitor	CVE-2023-5975No exploit	ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajaximagemapper project · imagemapper · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Nov 7, 2023
17Monitor	CVE-2023-5532No exploit	ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_titleimagemapper project · imagemapper · CWE-352 Pre-auth XSS CSRF	Medium4.3	—	0.2%	Nov 7, 2023

CVE-2023-5507
21Monitor
ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
imagemapper project · imagemapperNov 7, 2023
CVE-2023-5506
17Monitor
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
imagemapper project · imagemapperNov 7, 2023
CVE-2023-5975
17Monitor
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
imagemapper project · imagemapperNov 7, 2023
CVE-2023-5532
17Monitor
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title
MediumCVSS 4.3No exploitEPSS 0%
imagemapper project · imagemapperNov 7, 2023