CVE-2023-24385

概要

参考情報

• patchstack.com/database/vulnerability/media-library-assistant/wordpress-media-library-assistant-plugin-3-11-cross-site-scripting-xss-vulnerability · Third Party Advisory

media library assistant のその他の脆弱性

• CVE-2025-7035中 5.4The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mla_tag_cloud and mla_term_li…
• CVE-2024-11974中 6.1The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘smc_settings_tab', 'unattachfixit-…
• CVE-2024-51661高 7.2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assi…
• CVE-2024-6823高 8.8The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the m…
• CVE-2024-5544中 6.1The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter in all versions up …