CVE-2024-2328

CVE-2024-2328 – Real Media Library: WordPress plugin Real Media Library (Lite) stores Cross‑Site Scripting via image title/alt text. Root cause: insufficient input sanitization and output escaping in image metadata. Affected: all versions up to and including 4.22.11. Impact: authenticated attacke...

CVE-2024-2027

CVE-2024-2027 affects Real Media Library: Media Library Folder & File Manager (WordPress). Root cause: insufficient input sanitization and output escaping in style attributes, enabling Stored XSS. Affected versions: all up to and including 4.22.7. Impact: authenticated attackers with contributor+...

CVE-2023-0285

CVE-2023-0285 affects the Real Media Library WordPress plugin. Versions prior to 4.18.29 do not sanitize/escape created folder names, enabling Stored XSS by users with author+ privileges. Impact: stored cross-site scripting with low/moderate severity (CVSS 3.1, base 5.4). Mitigation: upgrade to p...