PT-2020-12927 · WordPress · Media Library Assistant

Name of the Vulnerable Software and Affected Versions: media-library-assistant plugin versions prior to 2.82 for WordPress Description: The issue allows for Remote Code Execution via the tax query, meta query, or date query parameter in mla gallery through an admin interface. Recommendations: For...

MiniCMS Cross-Site Scripting Vulnerability (CNVD-2018-15846)

MiniCMS is a mini content management system CMS designed for personal websites. A cross-site scripting vulnerability exists in the http://example.org/mc-admin/page.php?date=payload URL in MiniCMS version 1.1. A remote attacker can exploit this vulnerability to inject code...