Filtered by vendor Devowl
Subscriptions
Filtered by product Wordpress Real Media Library
Subscriptions
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2021-34668 | 1 Devowl | 1 Wordpress Real Media Library | 2024-09-17 | 6.4 Medium |
The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1. |
Page 1 of 1.