CVE-2026-78393 — Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links

CVE-2026-78393

Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links PUBLISHED

Description (CNA)

The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in administrators.

Affected (CNA)

Vendor / product	Versions
Unknown / Link Library	affected 0 before 7.9.6

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/2605888a-195d-4bce-8aac-347710ad1de8/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.