Medium severity6.1NVD Advisory· Published Jul 29, 2026· Updated Aug 19, 2026
CVE-2026-18197
CVE-2026-18197
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS).
This issue affects Link Library: before 7.9.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- tenable.com/security/research/tra-2026-52nvdThird Party Advisory
- wordpress.org/plugins/link-library/nvdThird Party Advisory
News mentions
2- Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)Wordfence Blog · Aug 14, 2026
- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 27, 2026 to August 2, 2026)Wordfence Blog · Aug 8, 2026