https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-04T19:43:58.821552+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-113482 CVE-2026-113482 — Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute 2026-11-04T19:43:58.832550+00:00

Affected: Unknown Media Library Assistant

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.