Back to the CVE list

CVE-2026-103875

Media Library Assistant <= 3.42 - Reflected Cross-Site Scripting via 'search-string' Parameter via {+request:...+} in Pagination Links

CVSS score

4.7

EPSS probability

—

Risk score

0.5

Published

3 h ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

6.4

CVE-2026-6640Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter

Vendordglingren ProductMedia Library Assistant

Patch status unknownEPSS %01 mo ago

6.4

CVE-2026-6642Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import

Vendordglingren ProductMedia Library Assistant

Patch status unknownEPSS %01 mo ago

6.4

CVE-2026-6641Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter

Vendordglingren ProductMedia Library Assistant

Patch status unknown Public Exploits:1EPSS %01 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-103875"

CVE-2026-103875 · Media Library Assistant <= 3.42 -…