CVE-2026-113482

The Media Library Assistant WordPress plugin (versions before 3.44 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The issue occurs because the plugin fails to escape one of its shortcode attributes, specifically the mla_item_parameter attribute, before outputting it into the attributes of...

CVE-2026-113482 Media Library Assistant < 3.44 - Contributor+ Stored XSS via mla_item_parameter Shortcode Attribute

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...