2 matches found
PT-2021-20620
Name of the Vulnerable Software and Affected Versions: Media Usage WordPress plugin versions up to and including 0.0.4 Description: The issue allows attackers to inject arbitrary web scripts via the id parameter in the /mmu admin.php file, enabling Reflected Cross-Site Scripting attacks...
6.1CVSS0.00844EPSS
SaveExploits1References5
CVE-2021-34652: Improper Neutralization of Input During Web Page Generation
The Media Usage WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter in the /mmuadmin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.4...
6.1CVSS5.8AI score0.00844EPSS
SaveExploits1References3
20