Threats tagged 'ghsa-894j-4953-62g7'

A stored cross-site scripting (XSS) vulnerability exists in the Media Library Assistant WordPress plugin versions before 3.44. The flaw arises because one of the plugin's shortcode attributes is not properly escaped before being output in an attribute of generated links. This allows users with Contributor role or higher to inject malicious scripts that persist and execute in other users' browsers.