CVE-2026-53742 — Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can …
Published: 2026-06-10 · CVSS: 5.1 · CVSS 4.0
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7