wordpress_real_media_library Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wordpress_real_media_library/ Thu, 23 Feb 2023 14:10:19 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png wordpress_real_media_library Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wordpress_real_media_library/ 32 32 CVE-2021-34668 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34668/ Thu, 23 Feb 2023 14:10:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34668/ The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1.

The post CVE-2021-34668 appeared first on CVE Vulnerability.

]]> The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1.

The post CVE-2021-34668 appeared first on CVE Vulnerability.

]]> CVE-2023-0253 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0253/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0253 The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via folder names in versions up to, and including, 4.18.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with author-level permissions and above to inject arbitrary web scripts in […]

The post CVE-2023-0253 appeared first on CVE Vulnerability.

]]> The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via folder names in versions up to, and including, 4.18.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with author-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The post CVE-2023-0253 appeared first on CVE Vulnerability.

]]>