SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-18197

MEDIUM · CVSS 6.1 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

Link Library versions prior to 7.9.4 are susceptible to a cross-site scripting (XSS) vulnerability due to improper input neutralization during web page generation. This flaw could allow an attacker to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data exposure. Organizations utilizing affected versions of Link Library should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-18197
Severity
MEDIUM
CVSS
6.1
EPSS
0.16%

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS). This issue affects Link Library: before 7.9.4.

Related CVEs

Other vulnerabilities affecting the same vendor(s)