Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <= 1.3.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| D. Relton | Medialist | ≤ 1.3.9 | — |
Medium · 6.5
CVE-2023-46640
EUVD-2023-50842GHSA-5j39-j89r-24vc
WordPress Medialist Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)
Published Nov 8, 2023 · Updated Apr 29, 2026 · Assigned by Patchstack