Enhanced Media Library [enhanced-media-library] < 2.8.10
unknown
[en] The Enhanced Media Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload functionality in all versions up to, and including, 2.8.9 due to the plugin allowing 'dfxp' files to be uploaded. This makes it possible for authenticated attackers, with author-level access and above, to...
- Affected:
- up to 2.8.10
- Fixed in:
- 2.8.10
- Disclosed:
- May 2, 2024
CVE-2024-2840 on NVD →
Enhanced Media Library <= 2.8.9 - Authenticated (Author+) Stored Cross-Site Scripting
medium
The Enhanced Media Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload functionality in all versions up to, and including, 2.8.9 due to the plugin allowing 'dfxp' files to be uploaded. This makes it possible for authenticated attackers, with author-level access and above, to injec...
- CVSS:
- 5.4
- Affected:
- up to 2.8.9
- Fixed in:
- 2.8.10
- Disclosed:
- Apr 15, 2024
CVE-2024-2840 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database