Filtered by vendor Devowl Subscriptions
Filtered by product Wordpress Real Media Library Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-0253 1 Devowl 1 Wordpress Real Media Library 2023-11-07 5.4 Medium
The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via folder names in versions up to, and including, 4.18.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with author-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2021-34668 1 Devowl 1 Wordpress Real Media Library 2021-09-02 5.4 Medium
The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1.