CVE-2026-66591

A Stored Cross-Site Scripting (XSS) vulnerability exists in the WordPress plugin Media Library Assistant by David Lingren, affecting versions up to and including 3.39 . The flaw stems from improper neutralization of input during web page generation , allowing malicious scripts to be permanently s...