Threats tagged 'ghsa-8389-f78q-g2vx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-7209The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Medium6.42026-05-02GCVE DatabaseCVE-2026-7209 The Simple Link Directory WordPress plugin up to version 8.9.2 contains a stored cross-site scripting (XSS) vulnerability in the `qcopd-directory` shortcode. This flaw arises from insufficient sanitization and escaping of user-supplied attributes such as `title_font_size`. Authenticated users with contributor-level or higher privileges can inject malicious scripts that execute when other users view the affected pages. Report on CVE-2026-7209 Vulnerability CWE-79 #ghsa-8389-f78q-g2vx	GCVE Database	2026-05-02

Page 1 of 1