CVE-2023-0285

Real Media Library < 4.18.29 - Author+ Stored XSS

published February 21, 2023

CVSS
—
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.7th percentile
Published
2023-02-21T08:50Z
EPSS history
Timeline
  • 21 FEB 08:50Z
    Real Media Library < 4.18.29 - Author+ Stored XSS
    cvelistv5