Volerion logoVolerion
Volerion logoVolerion

WordPress Mediabay Reflected Cross-Site Scripting Vulnerability via Cross-Site Request Forgery

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability in the Mediabay WordPress plugin for managing media library folders, specifically in versions through 1.4, allows for Reflected Cross-Site Scripting (XSS) attacks. This vulnerability could enable an attacker to trick users with higher privileges into performing actions that could lead to XSS exploitation.

Impact

Exploitation of this vulnerability could result in Reflected Cross-Site Scripting, where an attacker could inject malicious scripts that are executed in the context of the user's browser.

Added: Jun 6, 2025, 3:05 PM
Updated: Jun 6, 2025, 3:05 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
1.7
exploitability
6.5
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.