5.1
Moyenne
CVE-2026-53742 Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in…
Description
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Simple Link Directory 9.0 | premières → 9.0.4 | Pas de correctif indiqué |
Autres CVE de Simple Link Directory
Les 11 CVE de Simple Link Directory →
CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions
7.1
Élevée
CVE-2026-53741
Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal…
5.1
Moyenne
CVE-2026-7209
The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
6.4
Moyenne
CVE-2025-67576
Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting…
5.3
Moyenne