Security Advisory

CVE-2020-11928

9.8
CRITICAL

Vulnerability Description

In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin.
Published Date April 20, 2020
Official Source NIST NVD Advisory