CVE-2023-0285

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.

Score

CVSS 3.1 5.4 Medium

Status

Modified - contact@wpscan.com

Published

2023-02-21

Last modified

2025-03-12

Weaknesses

CWE-79

Affected products

• Real Media Library (Devowl)
• Real Media Library Media Library Folder File Manager (Unknown)

References

• https://wpscan.com/vulnerability/adf09e29-baf5-4426-a281-6763c107d348