Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: quantumcloud Component: Simple Link Directory Clear all filters
TI-2022-00671 CVE-2022-0760 · GHSA-r29c-p472-3p96

Simple Link Directory < 7.7.2 - Unauthenticated SQL injection

Priority MEDIUM 55

The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX action (available to unauthenticated and auth…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10825 Published 2022-03-21 Fixed in 7.7.2 CWE-89
TI-2019-10108 CVE-2019-13463 · GHSA-cphj-wfqr-mqxx

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin…

Priority LOW 30

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html is not called for the…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01144 Published 2020-03-20 No fix listed CWE-79