The Link Library WordPress plugin versions prior to 7.9.4 contain a reflected XSS vulnerability (CWE-79) due to improper sanitization and escaping of user-supplied input that is reflected back in HTTP responses. This flaw enables unauthenticated attackers to perform reflected Cross-Site Scripting attacks against users who are tricked into clicking a specially crafted link or performing a specific action. No CVSS score or detailed exploit information is currently available, and no official remediation or patch information has been provided.

Successful exploitation could allow an attacker to execute arbitrary JavaScript in the context of a victim's browser session when they interact with a maliciously crafted link. This may lead to session hijacking, defacement, or other client-side attacks against users of the vulnerable plugin. However, no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with untrusted links related to the Link Library plugin and consider disabling or restricting the plugin if possible.