XSS Vulnerability in Simple Link Directory WordPress Plugin
CVE-2019-13463
6.1MEDIUM
What is CVE-2019-13463?
An XSS vulnerability exists in the Simple Link Directory plugin prior to version 7.3.5 for WordPress. Attackers can exploit this flaw to inject arbitrary web scripts or HTML due to the lack of proper escaping for user input in the 'echo get_the_title()' and 'echo $term->name' statements in the qcopd-shortcode-generator.php file. This allows remote attackers to manipulate the content rendered to users, posing a potential risk to site integrity.