Link Library
Yannick Lefebvre
Developer
7.10.1
Latest version
10,000
Installations
No date
Last updated
Vulnerability history
0 present
33 patched
14 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 7.10.022 hours ago
- Unauthenticated Link Submission Login Requirement Bypass vulnerability< 7.10.029/10/2026
- Unauthenticated Link Contact and Submitter Information Disclosure vulnerability< 7.10.029/10/2026
- Contributor+ Stored XSS vulnerability< 7.9.622/10/2026
- Reflected XSS vulnerability< 7.9.625/09/2026
- Contributor+ Path Traversal vulnerability< 7.9.625/09/2026
- Unauthenticated SSRF vulnerability< 7.9.625/09/2026
- Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability< 7.9.320/08/2026
- Unauthenticated Arbitrary File Deletion via link_url Parameter vulnerability<= 7.9.418/08/2026
- Reflected Cross-Site Scripting vulnerability< 7.9.404/08/2026
- Arbitrary File Deletion vulnerability<= 7.8.822/04/2026
- Server Side Request Forgery (SSRF) vulnerability<= 7.8.724/12/2025
- Cross Site Scripting (XSS) Vulnerability<= 7.822/04/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters vulnerability<= 7.7.304/04/2025
- Reflected Cross-Site Scripting vulnerability<= 7.7.221/01/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 7.7.111/07/2024
- Reflected Cross-Site Scripting (XSS) vulnerability<= 7.6.306/06/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode vulnerability<= 7.6.1108/05/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 7.616/03/2024
- Reflected Cross-Site Scripting vulnerability<= 7.6.614/03/2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 7.620/02/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 7.5.1305/02/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 7.5.1305/02/2024
- Admin+ Stored XSS Vulnerability< 7.4.126/12/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 7.2.830/12/2021
- Library Settings Reset via Cross-Site Request Forgery (CSRF) vulnerability<= 7.2.730/12/2021
- Unauthenticated Arbitrary Links Deletion vulnerability<= 7.2.730/12/2021
- Authenticated SQL Injection vulnerability<= 5.9.13.2616/08/2017
- Cross Site Scripting<= 5.9.12.2916/08/2016
- SQL Injection<= 5.1.615/05/2015
- Cross Site Scripting<= 5.0.815/05/2015
- SQL Injection<= 5.0.815/05/2015
- SQL Injection<= 5.2.124/09/2011