Read the docs

Media-tags Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Media-tags Project records in CISA KEV

No Media-tags Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Media-tags 1 record LOW

Records

1 record

TI-2021-07179 CVE-2021-24899 · GHSA-c34h-vxpx-r4j2

Media-Tags <= 3.2.0.2 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Media-Tags WordPress plugin through 3.2.0.2 does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_htnl capabi…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-11-29 No fix listed CWE-79
Open these records in search →