The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.Referenceshttps://wordpress.org/plugins/media-library-assistant/#developers
