Vulnerabilities > Devowl > Wordpress Real Media Library > 4.13.5
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-02 | CVE-2023-0253 | Unspecified vulnerability in Devowl Wordpress Real Media Library The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via folder names in versions up to, and including, 4.18.28 due to insufficient input sanitization and output escaping. | 5.4 |
| 2021-08-30 | CVE-2021-34668 | Cross-site Scripting vulnerability in Devowl Wordpress Real Media Library The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1. | 3.5 |