Filtered by vendor Devowl
Subscriptions
Filtered by product Wordpress Real Media Library
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-0253 | 1 Devowl | 1 Wordpress Real Media Library | 2023-11-07 | 5.4 Medium |
The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via folder names in versions up to, and including, 4.18.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with author-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | ||||
CVE-2021-34668 | 1 Devowl | 1 Wordpress Real Media Library | 2021-09-02 | 5.4 Medium |
The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1. |
Page 1 of 1.