3371 matches found
CVE-2025-7035
The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mlatagcloud and mlatermlist shortcodes in all versions up to, and including, 3.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2025-7035
CVE-2025-7035 affects the WordPress Media Library Assistant plugin (versions up to and including 3.26). The root cause is insufficient input sanitization and output escaping on mla_tag_cloud and mla_term_list shortcodes, enabling stored XSS. Exploitation requires authenticated access at contribut...
CVE-2025-7035 Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes
The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mlatagcloud and mlatermlist shortcodes in all versions up to, and including, 3.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2025-7035 Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes
The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mlatagcloud and mlatermlist shortcodes in all versions up to, and including, 3.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
WordPress Media Library Assistant plugin <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via mlatagcloud and mlatermlist Shortcodes vulnerability discovered by muhammad yudha in WordPress Plugin Media LIbrary Assistant versions = 3.26...
WordPress plugin Media Library Assistant 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
PT-2025-29717 · WordPress · Media Library Assistant
Name of the Vulnerable Software and Affected Versions: Media Library Assistant plugin for WordPress versions up to and including 3.26 Description: The Media Library Assistant plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s mla tag cloud and mla term list...
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
HP Support Assistant < 9.46.17.0 Privilege Escalation (CVE-2025-43019)
The version of HP Support Assistant installed on the remote Windows host is prior to 9.46.17.0. It is, therefore, affected by a privilege escalation vulnerability: - A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate...
Software Fix (Rescue and Smart Assistant) DLL Hijack Vulnerability - Lenovo Support US
No description provided...
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019
HP Support Assistant is affected by CVE-2025-43019, a local privilege-escalation vulnerability arising from arbitrary file deletion. Connected sources confirm the issue and relate it to the HP Support Assistant product lines, with HP’s advisory HPSBGN04031 noting affected versions and a minimum m...
The vulnerability of the Out of Office Assistant system, related to insufficient protection of the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the Out of Office Assistant task distribution system is related to insufficient protection of the web page structure when processing the Jira fullName parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
PT-2025-28484
Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A potential security issue has been identified, allowing a local attacker to escalate privileges via an arbitrary file deletion. Recommendations: At the moment, there is no...
HP Support Assistant 安全漏洞
HP Support Assistant is a solution from Hewlett-Packard HP USA that provides support and other features for PCs and printers. A security vulnerability exists in HP Support Assistant that originates from a local attacker being able to elevate privileges via arbitrary file deletion...
HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion. HP has identified affected versions and the minimum version that mitigates the potential vulnerability. See the affected product...