admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2023/CVE-2023-0285.md
0xMarcio 4bc2a1b403 Update CVE sources 2024-08-08 18:49
2024-08-08 18:49:29 +00:00

839 B
Raw Permalink Blame History

CVE-2023-0285

Description

The Real Media Library WordPress plugin before 4.18.29 does not sanitise and escape the created folder names, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.

POC

Reference

Github