Vulnerabilities > Davidlingren

DATE CVE VULNERABILITY TITLE RISK
2020-04-13 CVE-2020-11731 Cross-site Scripting vulnerability in Davidlingren Media Library Assistant
The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute arbitrary JavaScript.
network
low complexity
davidlingren CWE-79
6.1
2019-08-22 CVE-2018-20982 Cross-site Scripting vulnerability in Davidlingren Media Library Assistant
The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.
network
low complexity
davidlingren CWE-79
6.1