5.1
Medium
CVE-2026-53742 Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in…
Description
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simple Link Directory 9.0 | earliest → 9.0.4 | No fix stated |
Other CVEs of Simple Link Directory
The 11 CVEs of Simple Link Directory →
CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions
7.1
High
CVE-2026-53741
Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal…
5.1
Medium
CVE-2026-7209
The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
6.4
Medium
CVE-2025-67576
Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting…
5.3
Medium