Medialist

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5942 Nov 27, 17:15 MEDIUM POC This Month

The Medialist WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Medialist

NVD WPScan

CVSS 3.1

5.4

EPSS

0.5%

CVE-2023-46640 Nov 08, 16:15 MEDIUM This Month

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <= 1.3.9 versions.

XSS Medialist

NVD VulDB

CVSS 3.1

6.5

EPSS

0.2%

CVE-2023-5942

EPSS 0% CVSS 5.4

MEDIUM POC This Month

WordPress XSS Medialist

NVD WPScan

CVE-2023-46640

EPSS 0% CVSS 6.5

MEDIUM This Month

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <= 1.3.9 versions.

XSS Medialist

NVD VulDB