CVE-2023-24385: Davidlingren Media Library Assistant

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in David Lingren Media Library Assistant plugin <= 3.11 versions.

Affected products

• Davidlingren Media Library Assistant: before 3.12 (fixed in 3.12)

Published 2023-10-17. Last modified 2026-06-17.