CVE-2026-113482

CVSS 3.1: 6.8 medium
EPSS: —
Published: Nov 1, 2026 · 14h ago
Modified: Nov 1, 2026

Analyze CVE-2026-113482 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

Ecosystems: WordPress

Weakness: CWE-79

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (—)

In the news

0 stories

No ingested article mentions this CVE yet.