CVE-2026-113482
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 01, 2026
Vendor
unknown
Description
The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.