PT-2026-98358 · Unknown · Link Library

Karthik Ramakrishnan

·

CVE-2026-78393

·

Published

2026-09-25

·

Updated

2026-09-25

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Link Library versions prior to 7.9.6
Description Insufficient escaping of parameters used in the addresses of links generated on front-end directory pages allows Reflected Cross-Site Scripting (XSS). This occurs via the link tags and link price parameters in sort and breadcrumb links, potentially affecting any visitor, including logged-in administrators.
Recommendations Update Link Library to version 7.9.6 or later.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-78393

Affected Products

Link Library