CVE-2021-39311

Name of the Vulnerable Software and Affected Versions: link-list-manager WordPress plugin versions up to and including 1.0

Description: The issue allows attackers to inject arbitrary web scripts via the category parameter found in the ~/llm.php file, enabling Reflected Cross-Site Scripting attacks.

Recommendations: For versions up to and including 1.0, update to a version that fixes this issue to prevent Reflected Cross-Site Scripting attacks. As a temporary workaround, consider restricting access to the ~/llm.php file or disabling the category parameter until a patch is available.