Wp Media Library Categories Vulnerabilities

The Media Library Categories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject a...

CVSS:

4.4

Affected:

up to 2.0.0

Fixed in:

2.0.1

Disclosed:

Jul 20, 2023

CVE-2023-36382 on NVD →

The Media Library Categories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpmediacategory_taxonomy’ plugin option in versions up to, and including, 1.9.9 due to insufficient input sanitization and output escaping. This makes it possible for administrator-level attackers to inject arbitrary...

CVSS:

5.5

Affected:

up to 1.9.9

Fixed in:

2.0.0

Disclosed:

Jan 20, 2023

CVE-2022-47596 on NVD →