Threats tagged 'ghsa-pm7r-7m99-28qp'

A critical SQL injection vulnerability exists in the Link Library WordPress plugin before version 7.9.3. The plugin does not properly sanitize and escape user-supplied input before including it in SQL queries, allowing unauthenticated attackers to execute arbitrary SQL commands. This can lead to full compromise of the confidentiality and integrity of the affected database. No official patch or remediation guidance is currently confirmed.