https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-04T09:34:48.130244+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-113482 fkie_cve-2026-113482 2026-11-04T09:34:48.203322+00:00

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

 https://db.gcve.eu/vuln/ghsa-894j-4953-62g7 GHSA-894j-4953-62g7 2026-11-04T09:34:48.203482+00:00

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.