PT-2024-18130 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library plugin for WordPress versions up to, and including, 7.6 Description: The issue is related to Stored Cross-Site Scripting via the ll reciprocal parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-24875

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875

CVE-2024-24875 is a CSRF vulnerability in the WordPress Link Library plugin by Yannick Lefebvre, affecting Link Library versions through 7.5.13. The issue allows an attacker to perform unintended actions on behalf of an authenticated user (CSRF). The available connected documents indicate a fix i...

PT-2024-20631 · Yannick Lefebvre · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library versions through 7.5.13 Description: A Cross-Site Request Forgery CSRF issue affects the Yannick Lefebvre Link Library. This issue allows an attacker to perform unintended actions on a user's behalf. Recommendations: For versions...

WordPress Plugin Link Library Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-7782

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted file, such as MODEL, SLDPRT, or SLDASM, can cause a Heap-based Overflow when parsed in ODXSW DLL.dll and libodxdll.dll through Autodesk applications. This can...

CVE-2024-24879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24879 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24879

CVE-2024-24879 refers to a Cross-Site Scripting (XSS) flaw in the WordPress Link Library plugin, affecting versions

CVE-2024-24879 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

Link Library < 7.6 - Cross-Site Request Forgery via action_admin_init

Description The Link Library plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.5.13. This is due to missing or incorrect nonce validation on the actionadmininit function. This makes it possible for unauthenticated attackers to dismissing a notice...

Link Library < 7.6 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'

Description The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'linkprice' and 'linktags' parameters in versions up to, and including, 7.5.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

WordPress Plugin Link Library Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)

Software Link Library Type Plugin Vulnerable versions = 7.5.13 Fixed in 7.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-24875 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 771a2cb13065 Credits Dhabaleshwar Das Requir...