CVE-2026-53742 – Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes

CVE ID :CVE-2026-53742

Published : June 10, 2026, 8:39 p.m. | 38 minutes ago

Description :Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer’s browser.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…