CVE-2021-25091

CVE-2021-25091 affects the WordPress Link Library plugin prior to 7.2.9. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by insufficient sanitisation/escaping of the settingscopy parameter before it is output on an admin page. Impact is reflected XSS as described in multiple so...

CVE-2021-25091 Link Library < 7.2.9 - Reflected Cross-Site Scripting

The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...