Description
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
Remediation
References
Related Vulnerabilities
Oracle Database Server Other Vulnerability (CVE-2006-2081)
WordPress Plugin PayPal Digital Goods powered by Cleeng Cross-Site Scripting (2.2.13)
WordPress Plugin FireStats 'firestats-wordpress.php' Remote File Include (1.6.1)
WordPress Plugin Zingiri Web Shop 'abspath' Parameter Remote File Include (2.4.6)
WordPress Plugin Product Reviews Import Export for WooCommerce CSV Injection (1.4.8)