This vulnerability in Media LIbrary Assistant allows an attacker with high privileges and requiring user interaction to inject and store malicious scripts due to improper input neutralization during web page generation. When these scripts execute in the context of other users, it can lead to limited confidentiality, integrity, and availability impacts. The vulnerability affects all versions up to 3.24. No patch or official fix information is currently provided.

Successful exploitation could allow an attacker with high privileges to execute stored malicious scripts in the context of other users, potentially leading to limited data disclosure, modification, or disruption of service. The impact is rated medium with partial loss of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and carefully validate and sanitize inputs to mitigate risk.