CVE-2026-16535

Name of the Vulnerable Software and Affected Versions Link Library versions prior to 7.9.4

Description An issue exists where the software fails to sanitize and escape a parameter before reflecting it in a response. This allows unauthenticated attackers to execute Reflected Cross-Site Scripting (XSS) attacks—a technique where malicious scripts are injected into trusted websites—against users who are tricked into performing a specific action. The vulnerability is associated with the likelabel parameter in the Thumbs-Rating functionality.

Recommendations Update Link Library to version 7.9.4 or later. As a temporary mitigation, restrict access to the Thumbs-Rating feature or avoid using the likelabel parameter until the update is applied.