WordPress Plugin Vulnerabilities

Media Library Assistant < 2.7.4 - Cross-Site Scripting (XSS)

Description

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.

Affects Plugins

Plugin icon
media-library-assistant
Fixed in 2.7.4

References

CVE
CVE-2018-20982

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
5437ded1-46b8-4ba1-8e53-f069af762dd1

Timeline

Publicly Published
2018-06-18 (about 7 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-11-18
Title
WPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSS
Published
2024-04-24
Title
Simple Membership < 4.4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2023-10-07
Title
RegistrationMagic < 5.2.4.2 - Reflected Cross-Site Scripting via section_id
Published
2024-10-10
Title
Increase upload file size & Maximum Execution Time limit < 3.0 - Reflected Cross-Site Scripting
Published
2023-10-16
Title
FreshMail For WordPress <= 2.3.2 - Reflected XSS