CVE-2024-11974: Improper Neutralization of Input During Web Page Generation

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘smcsettingstab', 'unattachfixit-action', and 'woofixit-action’ parameters in all versions up to, and including, 3.23 due to insufficient input sanitization and output escaping. This makes it...

PT-2025-1725

Name of the Vulnerable Software and Affected Versions Media Library Assistant plugin for WordPress versions up to, and including, 3.23 Description The issue is related to Reflected Cross-Site Scripting via the smc settings tab, unattachfixit-action, and woofixit-action parameters due to...