CVE-2026-7501: LinkStackOrg LinkStack UserController.php editPage cross site scripting
A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulation of the argument pageDescription can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a pull request but has not reacted yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7501?
CVE-2026-7501 is categorized as a cross-site scripting (XSS) vulnerability that can lead to significant security breaches.
How do I fix CVE-2026-7501?
To mitigate CVE-2026-7501, validate and sanitize all user inputs, especially the pageDescription parameter in the editPage function.
What versions of LinkStack are affected by CVE-2026-7501?
CVE-2026-7501 impacts LinkStack versions up to and including 4.8.6.
What impact can CVE-2026-7501 have on my application?
Exploitation of CVE-2026-7501 can allow an attacker to execute arbitrary JavaScript in the context of a user's session.
Is CVE-2026-7501 a known vulnerability?
Yes, CVE-2026-7501 is a recognized vulnerability documented in various cybersecurity resources.