CVE-2024-38711

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.1MEDIUM

EPSS

0.4%

top 40.95%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Ylefebvre Link Library Yannick Lefebvre Link Library

Timeline

PublishedJul 20

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.7.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.7

Affected Packages2 packages

▶CVEListV5yannick_lefebvre/link_libraryn/a — 7.7.1

▶NVDylefebvre/link_library< 7.7.2

🔴Vulnerability Details

CVEList

WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability↗2024-07-20

▶

GHSA

GHSA-4r5f-q294-8gxm: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Refl↗2024-07-20

▶