3 results (0.009 seconds)

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

31 Oct 2023 — Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yakir Sitbon, Ariel Klikstein Linker plugin <= 1.2.1 versions. Vulnerabilidad de Coss-Site Scripting (XSS) autenticada (con permisos de admin o superiores) almacenada en el complemento Yakir Sitbon, Ariel Klikstein Linker en versiones <= 1.2.1. The Linker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.2.1 due to insufficient input sanitization and outp... • https://patchstack.com/database/vulnerability/linker/wordpress-linker-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

06 Jun 2007 — Cross-site scripting (XSS) vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the kword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php de codelib Linker 2.0.4 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del pa... • http://osvdb.org/36412 •

CVSS: 6.1EPSS: 3%CPEs: 1EXPL: 2

06 Jun 2007 — Cross-site scripting (XSS) vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php de Codelib Linker 2.0.4 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través del parámetro cat. • https://www.exploit-db.com/exploits/30138 •