CVE-2019-13463

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...

CVE-2019-13463: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...

PT-2020-9402

Name of the Vulnerable Software and Affected Versions: Simple Link Directory plugin versions prior to 7.3.5 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This is because the esc html function is not called for the echo get the title or echo $term-name...