CVE-2026-16535

The Link Library WordPress plugin version before 7.9.4 is vulnerable to a Reflected Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape a parameter before reflecting it back in an HTTP response. This allows unauthenticated attackers to target users who...