CVE-2021-34652: Media Usage <= 0.0.4 Reflected Cross-Site Scripting
The Media Usage WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter in the ~/mmuadmin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34652?
CVE-2021-34652 is classified as a Cross-Site Scripting vulnerability, which can allow attackers to execute arbitrary scripts on a user's browser.
How do I fix CVE-2021-34652?
To fix CVE-2021-34652, update the Media Usage WordPress plugin to version 0.0.5 or later.
Which versions of the Media Usage plugin are affected by CVE-2021-34652?
CVE-2021-34652 affects all versions of the Media Usage plugin up to and including 0.0.4.
What impact does CVE-2021-34652 have on my website?
CVE-2021-34652 can potentially allow attackers to inject malicious scripts, compromising user sessions and data.
Is CVE-2021-34652 easy to exploit?
CVE-2021-34652 can be exploited easily by an attacker who crafts a malicious URL containing the vulnerable id parameter.