Input validation vulnerability in Visual Website Collaboration, Feedback & Project Management – Atarim 3.9.3

The Atarim plugin for WordPress is not secure against malicious attacks. In versions up to and including 3.9.3 of the plugin, attackers can inject harmful code into web pages if they can manage to get a user to click on a link. This is done by exploiting a vulnerability in the way the plugin handles the ‘wpf_graphics_excerpt’ parameter, which is not properly sanitized or protected. This code can then be executed, potentially damaging the user’s device.