CVE-2021-25091

The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

PT-2022-9647 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library WordPress plugin versions prior to 7.2.9 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the settingscopy parameter is not properly sanitised and escaped before being outputted bac...

WordPress plugin 跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress Link Library plugin prior to 7.2.9, which stems from the plugin's failure to clean and escape settingscopy parameters befo...