1079 matches found
CVE-2022-47596 WordPress Media Library Categories Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jeffrey-WP Media Library Categories plugin = 1.9.9 versions...
WordPress Plugin Media Library Categories 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-0279
The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...
CVE-2023-0279
The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...
CVE-2023-0279 Media Library Assistant < 3.06 - Admin+ SQLi
The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...
CVE-2023-0279
CVE-2023-0279 affects the WordPress plugin Media Library Assistant (versions
CVE-2023-0279 Media Library Assistant < 3.06 - Admin+ SQLi
The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...
WordPress Plugin Media Library Assistant SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress Plugin...
CVE-2023-0285
The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0285
The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...
Cross site scripting
The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0285 Real Media Library < 4.18.29 - Author+ Stored XSS
The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0285 Real Media Library < 4.18.29 - Author+ Stored XSS
The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0285
CVE-2023-0285 affects the Real Media Library WordPress plugin. Versions prior to 4.18.29 do not sanitize/escape created folder names, enabling Stored XSS by users with author+ privileges. Impact: stored cross-site scripting with low/moderate severity (CVSS 3.1, base 5.4). Mitigation: upgrade to p...
WordPress Media Library Assistant Plugin < 3.06 is vulnerable to SQL Injection
Software Media Library Assistant Type Plugin Vulnerable versions 3.06 Fixed in 3.06 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0279 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID a816641d579e Credits Daniel Krohmer Fraunhofer IESE Kunal Sharma...
WordPress plugin Real Media Library 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
SUSE CVE-2008-3231
xine-lib before 1.1.15 allows remote attackers to cause a denial of service crash via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine...
CVE-2023-0253
Rejected reason: REJECT Accidental CVE Assignment. Please use CVE-2023-0285...
Cross site scripting
The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via folder names in versions up to, and including, 4.18.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...