Cross-Site Scripting Flaw in ImageInject Plugin for WordPress
CVE-2018-5284

4.8MEDIUM

Key Information:

Vendor: Wordpress
Status: Imageinject
Vendor: CVE Published:; 8 January 2018

What is CVE-2018-5284?

The ImageInject plugin version 1.15 for WordPress contains a vulnerability that allows attackers to exploit the flickr_appid parameter. This weakness permits Cross-Site Scripting (XSS) attacks, enabling malicious users to inject arbitrary scripts into web pages. These scripts can be used to compromise user sessions, manipulate web content, and potentially perform other harmful actions. Site administrators using this plugin should take precautionary measures to safeguard against XSS attacks.