CVE-2024-11974 | Media Library Assistant Plugin up to 3.23 on WordPress Setting cross site scripting

A vulnerability has been found in Media Library Assistant Plugin up to 3.23 on WordPress and classified as problematic. This vulnerability affects unknown code of the component Setting Handler. The manipulation of the argument smc_settings_tab/unattachfixit-action/woofixit-action leads to cross site scripting.

This vulnerability was named CVE-2024-11974. The attack can be initiated remotely. There is no exploit available.