Lucene search
K

40 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-21318

Malware in sbrugna...

6.4CVSS5.6AI score0.00171EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-12364

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00285EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:51 a.m.2 views

CVE-2023-0285

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.5AI score0.00285EPSS
Exploits2References1
OSV
OSV
added 2024/05/02 5:15 p.m.3 views

CVE-2024-2328

The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image title and alt text in all versions up to, and including, 4.22.11 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS5.9AI score0.00206EPSS
Exploits0References3
NVD
NVD
added 2024/05/02 5:15 p.m.12 views

CVE-2024-2328

The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image title and alt text in all versions up to, and including, 4.22.11 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.7AI score0.00206EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/05/02 4:52 p.m.18 views

CVE-2024-2328 Real Media Library <= 4.22.11 - Authenticated (Author+) Stored Cross-Site Scripting

The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image title and alt text in all versions up to, and including, 4.22.11 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.8AI score0.00206EPSS
Exploits0References3
CVE
CVE
added 2024/05/02 4:52 p.m.72 views

CVE-2024-2328

CVE-2024-2328 – Real Media Library: WordPress plugin Real Media Library (Lite) stores Cross‑Site Scripting via image title/alt text. Root cause: insufficient input sanitization and output escaping in image metadata. Affected: all versions up to and including 4.22.11. Impact: authenticated attacke...

6.4CVSS5.7AI score0.00206EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/02 4:52 p.m.9 views

CVE-2024-2328

The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image title and alt text in all versions up to, and including, 4.22.11 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.8AI score0.00206EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.2 views

WordPress plugin Real Media Library: Media Library Folder & File Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

6.4CVSS5.7AI score0.00206EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/04/16 1:3 a.m.2 views

WordPress Real Media Library plugin <= 4.22.11 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Real Media Library Lite versions = 4.22.11...

6.4CVSS5.7AI score0.00206EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/04/16 12:0 a.m.17 views

WordPress Real Media Library Lite Plugin <= 4.22.11 is vulnerable to Cross Site Scripting (XSS)

Software Real Media Library Lite Type Plugin Vulnerable versions = 4.22.11 Fixed in 4.22.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2328 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e373234a026c Credits stealthcopte...

6.4CVSS5.8AI score0.00206EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/04/09 7:15 p.m.2 views

CVE-2024-2027

The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its style attributes in all versions up to, and including, 4.22.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS7.4AI score
Exploits0References2
NVD
NVD
added 2024/04/09 7:15 p.m.7 views

CVE-2024-2027

The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its style attributes in all versions up to, and including, 4.22.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00196EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/04/09 6:58 p.m.10 views

CVE-2024-2027

The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its style attributes in all versions up to, and including, 4.22.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00196EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.1 views

PT-2024-18639 · WordPress · The Real Media Library

Name of the Vulnerable Software and Affected Versions: The Real Media Library: Media Library Folder & File Manager plugin for WordPress versions up to, and including, 4.22.7 Description: The issue arises from insufficient input sanitization and output escaping in style attributes, allowing...

6.4CVSS8.8AI score0.00196EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.1 views

WordPress Plugin Real Media Library 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS7.7AI score0.00196EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/03/26 12:0 a.m.4 views

WordPress Real Media Library Lite Plugin <= 4.22.7 is vulnerable to Cross Site Scripting (XSS)

Software Real Media Library Lite Type Plugin Vulnerable versions = 4.22.7 Fixed in 4.22.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2027 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 04ccee33aae6 Credits Ngô Thiên An...

6.4CVSS5.8AI score0.00196EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/02/21 9:15 a.m.1 views

CVE-2023-0285

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS6.7AI score
Exploits0References1
NVD
NVD
added 2023/02/21 9:15 a.m.20 views

CVE-2023-0285

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.3AI score0.00285EPSS
Exploits2References1
Prion
Prion
added 2023/02/21 9:15 a.m.15 views

Cross site scripting

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks...

4.9CVSS5.3AI score0.00285EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder