Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
LinkedIn records in CISA KEVNo LinkedIn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 33
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03203 · Published 2021-02-05 · Fixed in 1.4.1 CWE-79
