8.5
High
CVE-2025-32297 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows SQL Injection.This issue affects Simple Link Directory: from n/a through < 14.8.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simple Link Directory 14.8 | earliest → 14.8.1 | No fix stated |
Other CVEs of Simple Link Directory
The 11 CVEs of Simple Link Directory →
CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions
7.1
High
CVE-2026-53742
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in…
5.1
Medium
CVE-2026-53741
Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal…
5.1
Medium
CVE-2026-7209
The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
6.4
Medium