XSS in Rick Mead Media Library Categories

CVE-2012-6630

Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) bulk parameter to media-library-categories/add.php or (2) q parameter to media-library-categories/view.php.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.016 (74.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2012-6630?
CVE-2012-6630 is a vulnerability in Rick Mead Media Library Categories, classified under Cross-site Scripting. Published 2014-01-16.
Is CVE-2012-6630 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.