Skip to content
OpenAdvisories

Vendor

dman25560

1 known vulnerabilities.

Products

MediaView 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-2481

    MediaView <= 1.1.2 - Reflected Cross-Site Scripting via id Parameter

    The MediaView plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id' parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attack…

    dman25560 MediaView Web / CMS