LL
Product
Link Library
9
CVEs
0
On KEV
9.1
Max CVSS
3
New 30D
Severity mix
Critical 1High 0Medium 8Low 0
Watch
Add Link Library to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16532 | 9.1 | Aug 3 | Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form Affected: before 7.9.3 |
| CVE-2026-78392 | 6.8 | Oct 22 | Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter Affected: before 7.9.6 |
| CVE-2026-78393 | 6.1 | Sep 25 | Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links Affected: before 7.9.6 |
| CVE-2026-16535 | 6.1 | Aug 8 | Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel Affected: before 7.9.4 |
| CVE-2026-18197 | 6.1 | Jul 29 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS) Affected: before 7.9.4 |
| CVE-2026-78396 New | 5.3 | Oct 29 | Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure Affected: before 7.10.0 |
| CVE-2026-78395 New | 5.3 | Oct 29 | Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass Affected: before 7.10.0 |
| CVE-2026-78394 | 4.1 | Sep 25 | Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter Affected: before 7.9.6 |
| CVE-2026-78397 | 4.0 | Sep 25 | Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation Affected: 7.8.8 before 7.9.6 |
Showing 9