Advisories · Technology
Link Library.
Every CVE that names Link Library among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure
- Link Library
- Information disclosure
- CVSS 5.3 Medium
Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass
- Link Library
- Broken access control
- CVSS 6.8 Medium
Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter
- Link Library
- Cross-site scripting (XSS)
- CVSS 4.0 Medium
Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation
- Link Library
- Server-side request forgery (SSRF)
- CVSS 4.1 Medium
Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter
- Link Library
- Path traversal
- CVSS 6.1 Medium
Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links
- Link Library
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel
- Link Library
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form
- Link Library
- SQL injection
- CVSS 6.4 Medium
Cross-site scripting in Link Library
- Link Library
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Link Library < 7.4.1 - Admin+ Stored XSS
- Link Library
-
Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
- Link Library
- Broken access control
-
Link Library < 7.2.8 - Library Settings Reset via CSRF
- Link Library
- Cross-site request forgery (CSRF)
-
Link Library < 7.2.9 - Reflected Cross-Site Scripting
- Link Library
- Cross-site scripting (XSS)