Link Library - Reflected Cross-Site Scripting

T1Covered by 1 source · first reported by Tenable Research at 29 Jul, 06:40 UTC

Link Library - Reflected Cross-Site Scripting The WordPress Plugin Link Library version below 7.9.4 is affected by an unauthenticated Reflected XSS. The 'thumbs_rating_add_vote' AJAX handler reads the 'likelabel' parameter without any sanitization and echoes it back into an HTML response. Joshua…

security

Sources

• T1Link Library - Reflected Cross-Site ScriptingTenable Research29 Jul, 06:40