Medium severity6.4NVD Advisory· Published Aug 30, 2021· Updated Jun 17, 2026
CVE-2021-34668
CVE-2021-34668
Description
The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the ~/inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1.
Affected products
2- Range: <=4.14.1
- devowl.io/WordPress Real Media Libraryv5Range: 4.14.1
Patches
Vulnerability mechanics
References
1- www.wordfence.com/vulnerability-advisories/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.