CVE-2026-78393
Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in administrators.
| Vendor | unknown |
| Product | link library |
| Published | Sep 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown link library
Be the first to know when new unknown vulnerabilities affecting unknown link library are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Link Library
0 < 7.9.6
References
Credits
Karthik Ramakrishnan WPScan