Vulnerability Description
The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.
References
FAQ
What is CVE-2026-16535?
CVE-2026-16535 is a documented vulnerability. The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scri...
How severe is CVE-2026-16535?
CVSS scoring is not yet available for CVE-2026-16535. Check NVD for updates.
Is there a patch for CVE-2026-16535?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.