Understanding the Real Media Library XSS Vulnerability
The Real Media Library plugin for WordPress, a popular tool for organizing media files, has a notable security flaw. This vulnerability, identified as CVE-2021-34668, is a type of Stored Cross-Site Scripting (XSS). In simple terms, this means that an attacker with author-level access or higher on a WordPress site could inject malicious code into folder names within the media library. When someone else views these folders, the malicious script could then run in their web browser, potentially leading to unauthorized actions or data theft.
Specifically, the vulnerability lies within the `name` parameter in the `~/inc/overrides/lite/rest/Folder.php` file of the plugin. This allowed for the injection of arbitrary web scripts, posing a risk to website administrators and visitors.
CVE Details
Product Name: Real Media Library WordPress Plugin
Published Date: August 30, 2021
Severity: Medium
Status: Analyzed
Affected Products
This Stored Cross-Site Scripting vulnerability impacts the Real Media Library plugin for WordPress. Specifically, all versions of the plugin up to and including 4.14.1 are vulnerable. If you are using an older version of this plugin, your site could be at risk.
Current Status
The status of this vulnerability is “Analyzed.” This indicates that the vulnerability has been thoroughly investigated and understood by security researchers and the vendor.
Severity Level
The vulnerability is rated as Medium severity with a CVSS score of 6.4. A medium severity rating suggests that while the vulnerability could be exploited, it might require specific conditions or privileges (like author-level access) to execute successfully. However, if exploited, Stored XSS can lead to significant issues, including defacement of the website, session hijacking, or redirection to malicious sites for users viewing the affected content.
Possible Solutions
To protect your WordPress website from this vulnerability, the most crucial step is to update your Real Media Library plugin immediately. While specific patch versions were not available through our automated research due to website security measures, it is always recommended to update to the latest available version of the plugin as soon as possible. Plugin developers typically release updates that address known security flaws.
Always ensure your WordPress core, themes, and all other plugins are also kept up-to-date. Regularly backing up your site and using a robust security solution can provide additional layers of protection.
References
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34668
