A vulnerability in Media Library Assistant allows for Stored Cross-site Scripting (XSS). This issue affects Media Library Assistant versions from n/a through 3.39. The vulnerability is due to improper neutralization of input during web page generation, allowing for Stored Cross-site Scripting (XSS). The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. Users of Media Library Assistant should up [truncated]
CVE-2026-61963 is an unauthenticated Cross Site Scripting (XSS) vulnerability in Media Library Assistant versions 3.38 and earlier. The vulnerability has a high CVSS score of 7.1 and could allow attackers to inject malicious scripts into the application. Defenders should verify the affected product deployments, review the supplied official advisory or CVE record to validate affected scope, severity, and v [truncated]
A high-severity SQL injection vulnerability was found in the Media Library Assistant plugin, affecting versions up to 3.35. This vulnerability, tracked as CVE-2026-56012, has a CVSS score of 8.5 and allows attackers to perform blind SQL injection attacks. The vulnerability was publicly disclosed on June 18, 2026. Users of the plugin should take immediate action to mitigate the risk. The vulnerability is c [truncated]
CVE-2026-54198 is a high-severity Unauthenticated Cross Site Scripting (XSS) vulnerability in Media Library Assistant versions up to and including 3.35. The vulnerability has a CVSS score of 7.1 and was published on 2026-06-16T10:16:28.730Z. The vulnerability allows an unauthenticated attacker to inject malicious JavaScript code, potentially leading to unauthorized actions or data exposure. The affected p [truncated]
