Security Advisory

CVE-2026-16535

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-08 06:00:11

Last updated 2026-08-10 19:08:24

Assigner WPScan

CVSS score 6.1

State PUBLISHED

Description

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.

← Browse all CVEs View on cve.org ↗