Ylefebvre

Link Library

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-24879

  • EPSS 0.38%
  • Veröffentlicht 08.02.2024 12:15:55
  • Zuletzt bearbeitet 28.04.2026 19:23:25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13.

4.8

CVE-2022-4199

Exploit
  • EPSS 0.47%
  • Veröffentlicht 16.01.2023 16:15:11
  • Zuletzt bearbeitet 21.11.2024 07:34:46

The Link Library WordPress plugin before 7.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallow...

6.1

CVE-2021-25091

Exploit
  • EPSS 0.8%
  • Veröffentlicht 01.02.2022 13:15:09
  • Zuletzt bearbeitet 21.11.2024 05:54:20

The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

6.5

CVE-2021-25092

  • EPSS 0.48%
  • Veröffentlicht 01.02.2022 13:15:09
  • Zuletzt bearbeitet 21.11.2024 05:54:20

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack

7.5

CVE-2021-25093

Exploit
  • EPSS 1.2%
  • Veröffentlicht 01.02.2022 13:15:09
  • Zuletzt bearbeitet 21.11.2024 05:54:20

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request