Advisories · Technology
jackdewey Link Library.
Every CVE that names jackdewey Link Library among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Link Library <= 7.10.0 - Unauthenticated Stored Cross-Site Scripting via 'link_description' Parameter
- jackdewey Link Library
- Cross-site scripting (XSS)
- CVSS 7.5 High
Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter
- jackdewey Link Library
- SQL injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
- jackdewey Link Library
- Path traversal
- CVSS 6.4 Medium
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
- jackdewey Link Library
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
- jackdewey Link Library
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
- jackdewey Link Library
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
- jackdewey Link Library
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
- jackdewey Link Library
- Cross-site scripting (XSS)