Simple Link Directory, CVE-2026-53742

CVE, Research URL: CVE-2026-53742
Home page URL: Security reports for Simple Link Directory
Application: Simple Link Directory
Published on: Jun 11, 2026
Research Description: Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser.
Affected versions: max 9.0.4.
Status: vulnerable