Spikefinned vulnerabilities

Products

• Imagemapper 4

Newest

• imagemapper project imagemapper ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title CVE-2023-5532 6.1 MediumNovember 7, 2023
• imagemapper project imagemapper ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5507 6.4 MediumNovember 7, 2023
• imagemapper project imagemapper ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax CVE-2023-5975 4.3 MediumNovember 7, 2023
• imagemapper project imagemapper ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax CVE-2023-5506 5.4 MediumNovember 7, 2023