Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-34668
HistoryAug 30, 2021 - 7:15 p.m.

Cross site scripting

2021-08-3019:15:00
PRIOn knowledge base
www.prio-n.com
1

0.001 Low

EPSS

Percentile

22.9%

The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1.

CPENameOperatorVersion
wordpress_real_media_libraryle4.14.1

0.001 Low

EPSS

Percentile

22.9%

Related for PRION:CVE-2021-34668