cleantalk
Vulnerabilities and Security Researches

Media Library Assistant, CVE-2025-59590

CVE, Research URL

CVE-2025-59590

Published on
Sep 23, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through <= 3.28.
Affected versions
max 3.29.
Status
vulnerable