Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS). This issue affects Link Library: before 7.9.4.

Info

CVECVE-2026-18197

First seen2026-07-29 08:30 UTC

Disclosed2026-07-29 08:16 UTC

Last updated2026-07-29 08:30 UTC

Channel statusauto

Summary

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS). This issue affects Link Library: before 7.9.4.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://tenable.com/security/research/tra-2026-52
https://wordpress.org/plugins/link-library/

Timeline

2026-07-29 nvd_ingest NVD