The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
CVE-2026-113482
NONE
Updated Nov 01, 2026
WordPress
CVE Details
CVE ID
CVE-2026-113482
Published Date
Nov 01, 2026
Vendor
WordPress
Severity
NONE
Impact
Minimal impact
Source
View Advisory