CVE-2023-34010

MediumCVSS 5.8

Published: 05/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

23th percentile - higher than 23% of all known CVEs

Summary

The David Lingren Media Library Assistant plugin versions up to 3.0.7 has an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this flaw to inject malicious scripts.

Risk Assessment

Exploitation of this vulnerability may lead to user data theft or session hijacking. Organizations should be aware of the security risks associated with web applications.

Recommendation

It is recommended to update the plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable.

Original NVD description (English source)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in submodule of David Lingren Media Library Assistant plugin <= 3.0.7 versions.