CVE-2025-7035: Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes
The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mlatagcloud and mlatermlist shortcodes in all versions up to, and including, 3.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7035?
CVE-2025-7035 is categorized as a high-severity vulnerability due to the potential for stored cross-site scripting.
How do I fix CVE-2025-7035?
To resolve CVE-2025-7035, update the Media Library Assistant plugin to a version newer than 3.26, which addresses the vulnerability.
What happens if I don't fix CVE-2025-7035?
If CVE-2025-7035 is not fixed, attackers may exploit this vulnerability to execute malicious scripts in the context of a user's session.
Which versions of the Media Library Assistant are affected by CVE-2025-7035?
All versions of the Media Library Assistant plugin up to and including 3.26 are affected by CVE-2025-7035.
What type of attack does CVE-2025-7035 enable?
CVE-2025-7035 enables stored cross-site scripting attacks, allowing attackers to inject malicious code into user content.