medium6.1
CVE-2026-78393
The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its fr…
Impact
The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in administrators.
Affected products
| Product | Affected versions |
|---|---|
| Link Library WordPress Plugin | before 7.9.6 |
Versions were read from the advisory text. No structured product data has been published for this record yet.