3 matches found
CVE-2021-39311
The link-list-manager WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category parameter found in the /llm.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0...
CVE-2021-39311: Improper Neutralization of Input During Web Page Generation
The link-list-manager WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category parameter found in the /llm.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0...
PT-2021-22520
Name of the Vulnerable Software and Affected Versions: link-list-manager WordPress plugin versions up to and including 1.0 Description: The issue allows attackers to inject arbitrary web scripts via the category parameter found in the /llm.php file, enabling Reflected Cross-Site Scripting attacks...