CVE-2023-0285 — Real Media Library < 4.18.29 - Author+ Stored XSS
The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perfor…
Published: 2023-02-21 · CVSS: Unscored
The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7