Skip to content
OpenAdvisories
High · 7.1 CVE-2024-56016 EUVD-2024-52914GHSA-6mf9-qjj3-5mmc

WordPress Image Mapper plugin <= 0.2.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Dec 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maartenhemmes Image Mapper image-mapper allows Reflected XSS.This issue affects Image Mapper: from n/a through <= 0.2.5.3.

Affected products

VendorProductAffectedFixed
maartenhemmes Image Mapper ≤ 0.2.5.3 —

References