CVE-2023-0285 in Real Media Library Plugin

Résumé

par MITRE • 21/02/2023

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 13/01/2023
• Divulgation: 21/02/2023
• Modérer: accepté
• Entrée: VDB-220174
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 5.4 (NVD)
• EPSS: 0.00457
• KEV: non
• Activités: très faible
• Secteur: Insurance, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-0285
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-0285
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-0285/