Media LIbrary Assistant vulnerabilities

6 known vulnerabilities in Media LIbrary Assistant from David Lingren. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Media LIbrary Assistant: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-115948Oct 26, 2026David Lingren

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42.

• 7.1 High severity

  Media LIbrary Assistant: Improper Neutralization of Input During Web Page Generation

  CVE-2026-95609Oct 9, 2026David Lingren

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

• 8.5 High severity

  Media LIbrary Assistant: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-56012Jun 18, 2026David Lingren

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This issue affects Media LIbrary Assistant: from n/a through 3.35.

• 8.5 High severity

  Media LIbrary Assistant: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-34885Apr 6, 2026David LingrenEPSS 1.67%

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.

• 8.5 High severity

  Media LIbrary Assistant: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-32399Mar 13, 2026David Lingren

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.32.

• 7.2 High severity

  Media LIbrary Assistant: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-51661Nov 4, 2024David LingrenEPSS 1.11%

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Command Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3