medium6.1
CVE-2021-25091
The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a…
Impact
The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ylefebvre | Link Library | before 7.2.9 |