External Media

External Media has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting, Server-Side Request Forgery (SSRF).

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all External Media vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-49335

External Media <= 1.0.36 - Authenticated (Contributor+) Server-Side Request Forgery

Read the full analysis

Vulnerability Records

4 records


2025-11-23 00:00	External Media <= 1.0.36 - Authenticated (Contributor+) Server-Side Request Forgery External Media <= 1.0.36	`CVE-2025-49335`	6.4 Medium	Drew Webber (mcdruid)	No
2023-03-30 00:00	External Media <= 1.0.36 - Authenticated(Author+) File Upload to Stored Cross-Site Scripting via SVG External Media <= 1.0.36	`N/A`	6.4 Medium	Anonymous	No
2022-11-28 00:00	External Media <= 1.0.35 - Authenticated (Administrator+) Stored Cross-Site Scripting External Media <= 1.0.35	`CVE-2022-3832`	5.5 Medium	zhangyunpei	Yes
2021-05-13 00:00	External Media <= 1.0.33 - Authenticated Arbitrary File Upload External Media < 1.0.34	`CVE-2021-24311`	8.8 High	Chloe Chamberland	Yes

Showing 1–4 of 4 reports