PT-2023-16113 · WordPress · Real Media Library
CVE-2023-0253
·
Published
2023-02-02
·
Updated
2024-08-06
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
The Real Media Library plugin for WordPress versions up to and including 4.18.28
Description
The issue is related to Stored Cross-Site Scripting via folder names due to insufficient input sanitization and output escaping. This allows authenticated attackers with author-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Recommendations
For versions up to and including 4.18.28, update to a version that addresses the insufficient input sanitization and output escaping issue to prevent Stored Cross-Site Scripting attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Real Media Library