CVE-2026-53741 – Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option

CVE ID :CVE-2026-53741

Published : June 10, 2026, 8:39 p.m. | 38 minutes ago

Description :Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal without encoding. Because sanitize_text_field leaves quotes intact, a stored payload breaks out of the string and runs script for every page visitor.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…