Link Library Security Vulnerabilities and Issues — Link Library CVE List

Lucene search

YlefebvreLink Library

3 matches found

CVE•added 2022/02/01 1:15 p.m.•33 views

CVE-2021-25091

The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

6.1CVSS6AI score0.0021EPSS

CVE•added 2022/02/01 1:15 p.m.•33 views

CVE-2021-25092

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack

6.5CVSS6.4AI score0.00103EPSS

CVE•added 2022/02/01 1:15 p.m.•29 views

CVE-2021-25093

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request

7.5CVSS7.4AI score0.00471EPSS