PT-2019-9722

Name of the Vulnerable Software and Affected Versions Media File Manager plugin version 1.4.2 Description The issue allows for XSS via the dir parameter of an mrelocator getdir action to the "wp-admin/admin-ajax.php" API endpoint. Recommendations For Media File Manager plugin version 1.4.2, avoid...

PT-2019-9721

Name of the Vulnerable Software and Affected Versions Media File Manager plugin version 1.4.2 Description The issue allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator getdir action to the "wp-admin/admin-ajax.php" URI. Recommendations For Media File Manag...