This vulnerability (CWE-79) in Link Library occurs because user input is not properly sanitized before being included in web pages, enabling cross-site scripting attacks. It affects all versions before 7.9.4. The CVSS 4.0 vector indicates the attack can be performed remotely without privileges or user interaction, but with low impact on confidentiality and integrity, and high scope and availability impact. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to session hijacking, defacement, or other client-side impacts. However, the impact on confidentiality and integrity is low, while availability and scope impacts are high according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is indicated, users should monitor vendor communications for updates. Until a patch is available, consider applying input validation or output encoding controls if feasible to mitigate XSS risks.