CVE-2023-0294

The Mediamatic – Media Library Folders plugin through version 2.8.1 contains a cross-site request forgery vulnerability caused by inadequate nonce verification in its AJAX functionality. An unauthenticated attacker could exploit this flaw to modify image categories managed by the plugin if they successfully deceive a site administrator into clicking a malicious link. The vulnerability remains unpatched as of the advisory date.

Based on public CVE data (MITRE/NVD).