CVE-2018-20982

The CVE concerns the WordPress plugin Media Library Assistant, affected in versions prior to 2.74. The issue is a cross-site scripting (XSS) vulnerability via the Media/Assistant or Settings/Media Library Assistant admin submenu screens, due to the underlying handling in those interfaces. Impact ...