Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in ImageLinks Interactive Image Builder for WordPress 1.5.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: October 11, 2021

The ImageLinks Interactive Image Builder plugin for WordPress is vulnerable to a security issue known as Reflected Cross-Site Scripting. If someone has an older version of this plugin, up to and including 1.5.2, they could be at risk. This means attackers could inject malicious web scripts into pages, if they can convince a user to click on a link. The issue is caused by the plugin not properly sanitizing and escaping input and output.

Detected in:

ImageLinks – Interactive Image Builder fixed vulnerable versions:
ImageLinks Interactive Image Builder for WordPress fixed vulnerable versions: >= * <= 1.5.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.