CVE-2026-57682 Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.

Affected products and versions

Product	Affected versions	Fixed in
Simple Link Directory 15.0	earliest → 15.0.5	No fix stated

Other CVEs of Simple Link Directory

The 11 CVEs of Simple Link Directory →

CVE-2026-53742 Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in… 5.1 Medium CVE-2026-53741 Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal… 5.1 Medium CVE-2026-7209 The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium CVE-2025-67576 Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting… 5.3 Medium