CVE-2026-54198

16th percentile — higher than 16% of all known CVEs

An unauthenticated Cross Site Scripting (XSS) vulnerability has been identified in Media Library Assistant versions up to 3.35. An attacker can exploit this flaw to inject malicious JavaScript code.

This vulnerability may lead to user data theft and session hijacking, posing a significant threat to the application's security and the organization's data.

It is recommended to update Media Library Assistant to the latest version to mitigate this vulnerability and conduct a security audit of the application.