Media Library Assistant vulnerable to OS Command Injection

CVE-2024-51661

What is CVE-2024-51661?

An OS Command Injection vulnerability exists in the Media Library Assistant plugin, developed by David Lingren. This vulnerability arises from improper neutralization of special elements within user inputs, allowing attackers to execute arbitrary commands on the host system. The issue specifically impacts all versions of Media Library Assistant prior to 3.19, enabling potential exploitation that could lead to unauthorized access or control over the affected environment.

References