Looking for the vulnerability index of Invicti's legacy products?
WordPress Plugin Link Library 'id' Parameter Cross-Site Scripting and SQL Injection Vulnerabilities (5.0.8) - Vulnerability Database

WordPress Plugin Link Library 'id' Parameter Cross-Site Scripting and SQL Injection Vulnerabilities (5.0.8)

Description

WordPress Plugin Link Library is prone to an SQL injection and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. WordPress Plugin Link Library version 5.0.8 is vulnerable; other versions may also be affected.

Remediation

Update to plugin version 5.0.9 or latest