CVE-2024-13101

The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress WP MediaTagger plugin <= 4.1.1 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WP MediaTagger versions = 4.1.1...

WordPress WP MediaTagger plugin <= 4.1.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin WP MediaTagger versions = 4.1.1...

CVE-2024-13112

WP MediaTagger WordPress plugin vulnerability CVE-2024-13112: Reflected XSS in 4.1.1 and earlier where a parameter is not sanitized/escaped before echoing in the page. Could affect admin/high-privilege users. Connected documents confirm the issue but do not publicly specify a patch/version beyond...