Showing 1 vulnerability on this page for import_legacy_media

Signals CISA KEV Ransomware Nuclei
import_legacy_media_project vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

import_legacy_media_project import_legacy_media Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.

CWE-79Dec 27, 20191 related artifact
CVSS6.1v3.1EPSS3.98%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX