PT-2024-18130 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library plugin for WordPress versions up to, and including, 7.6 Description: The issue is related to Stored Cross-Site Scripting via the ll reciprocal parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-24875

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24875

CVE-2024-24875 is a CSRF vulnerability in the WordPress Link Library plugin by Yannick Lefebvre, affecting Link Library versions through 7.5.13. The issue allows an attacker to perform unintended actions on behalf of an authenticated user (CSRF). The available connected documents indicate a fix i...

PT-2024-20631 · Yannick Lefebvre · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library versions through 7.5.13 Description: A Cross-Site Request Forgery CSRF issue affects the Yannick Lefebvre Link Library. This issue allows an attacker to perform unintended actions on a user's behalf. Recommendations: For versions...

PT-2024-7782

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted file, such as MODEL, SLDPRT, or SLDASM, can cause a Heap-based Overflow when parsed in ODXSW DLL.dll and libodxdll.dll through Autodesk applications. This can...

WordPress Plugin Link Library Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2024-24879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24879 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

CVE-2024-24879

CVE-2024-24879 refers to a Cross-Site Scripting (XSS) flaw in the WordPress Link Library plugin, affecting versions

CVE-2024-24879 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13...

WordPress Plugin Link Library Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Link Library < 7.6 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'

Description The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'linkprice' and 'linktags' parameters in versions up to, and including, 7.5.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

Link Library < 7.6 - Cross-Site Request Forgery via action_admin_init

Description The Link Library plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.5.13. This is due to missing or incorrect nonce validation on the actionadmininit function. This makes it possible for unauthenticated attackers to dismissing a notice...

WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

Software Link Library Type Plugin Vulnerable versions = 7.5.13 Fixed in 7.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24879 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d3a58aec2719 Credits Yudistira Arya Required privilege...