Import Legacy Media <= 0.1 - Cross-Site Scripting
A cross-site scripting vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.
import_legacy_mediaPoC 已收录
CVSS6.1EPSS 3.8%