Medium CVE-2026-53742 Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser. CVSS: 5.4...

#Sicherheitslücke #Browser

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-53742 – Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML ...

VERWANDTEARTIKEL

CVE-2026-42908

CVE-2026-45639

CVE-2026-46695 - BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files

CVE-2026-46703 - BoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Host

CVE-2026-42305 - Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows

[High] CVE-2026-53738 – Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke ...