src_1653fbf8e2da6d59a7
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Jul 29, 2026 06:40 UTC
- Retrieved
- Oct 08, 2026 03:51 UTC
Link Library - Reflected Cross-Site Scripting
Link Library - Reflected Cross-Site Scripting The WordPress Plugin Link Library version below 7.9.4 is affected by an unauthenticated Reflected XSS.The 'thumbs_rating_add_vote' AJAX handler reads the 'likelabel' parameter without any sanitization and echoes it back into an HTML response. Joshua Martinelle Wed, 07/29/2026 - 02:40
Reference details
- Source category
- Research & news
- Report title
Link Library - Reflected Cross-Site Scripting- First reported
- Jul 29, 2026 06:40 UTC
- Last reported
- Jul 29, 2026 06:40 UTC
- Catalog updated
- Oct 08, 2026 03:51 UTC
- Record ID
a62941f05311bcfe3acca2e0adbe880e828492375a9812aea040fcf4c7ac2d03
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.