What is GHSA-894j-4953-62g7?

GHSA-894j-4953-62g7 is a security advisory published by GitHub Security Advisories with Medium severity. The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode...

Which CVE IDs does GHSA-894j-4953-62g7 cover?

GHSA-894j-4953-62g7 covers the following CVE IDs: CVE-2026-113482. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-894j-4953-62g7?

GHSA-894j-4953-62g7 has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-894j-4953-62g7MediumCVSS 6.8

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode...

Vendor

GitHub Security Advisories

Published

November 1, 2026

Last Modified

November 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-113482 →

📋 Description

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-113482
https://wpscan.com/vulnerability/b01e935e-94ea-4993-8e49-2882f594bd54
https://github.com/advisories/GHSA-894j-4953-62g7