Skip to content
OpenAdvisories

Vendor

webbistro

1 known vulnerabilities.

Products

Enhanced Media Library 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2024-2840

    Enhanced Media Library <= 2.8.9 - Authenticated (Author+) Stored Cross-Site Scripting

    The Enhanced Media Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload functionality in all versions up to, and including, 2.8.9 due to the plugin allowing 'dfxp' files to be uploaded. This makes it possible for authenti…

    webbistro Enhanced Media Library Web / CMS