CVE-2017-20183

Name of the Vulnerable Software and Affected Versions External Media without Import Plugin version 1.0.0

Description A vulnerability was found in the External Media without Import Plugin on WordPress, affecting the print media new panel function of the file external-media-without-import.php. The manipulation of the arguments url, error, width, height, and mime-type leads to cross-site scripting. The attack can be initiated remotely.

Recommendations Upgrade to version 1.0.1 to address this issue. As a temporary workaround, consider restricting access to the print media new panel function until the update is applied. Avoid manipulating the arguments url, error, width, height, and mime-type in the affected function until the issue is resolved.