WP MediaTagger <= 4.1.1 - Cross-Site Scripting
WP MediaTagger WordPress plugin <= 4.1.1 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires user interaction or victim to visit a malicious link.
WP MediaTaggerPoC 已收录
CVSS—