Stored Cross-Site Scripting in Simple Link Directory Plugin

Executive Summary

This vulnerability exists in Simple Link Directory through version 9.0.4. It occurs because the sld_no_results_found option is inserted into a JavaScript string literal without proper encoding. The function sanitize_text_field does not remove quotes, which allows a stored malicious payload to break out of the string context and execute arbitrary script code for every visitor of the page.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows an attacker to inject and execute arbitrary JavaScript code on every page visit. This can lead to cross-site scripting (XSS) attacks, potentially compromising user data, session tokens, or performing actions on behalf of users without their consent.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is a stored cross-site scripting (XSS) issue in the Simple Link Directory plugin up to version 9.0.4, caused by improper encoding of the sld_no_results_found option in JavaScript.

To detect this vulnerability on your system, you can check if your WordPress installation uses the Simple Link Directory plugin version 9.0.4 or earlier.

You can also inspect the JavaScript code on pages using the plugin to see if the sld_no_results_found option is interpolated without proper encoding, which may allow script injection.

While no specific commands are provided in the resources, general detection steps include:

• Use WP-CLI to check the installed plugin version: `wp plugin list --format=json | jq '.[] | select(.name=="simple-link-directory")'`
• Manually review or grep plugin files for usage of `sld_no_results_found` in JavaScript contexts: `grep -r "sld_no_results_found" wp-content/plugins/simple-link-directory/`
• Use a web vulnerability scanner or browser developer tools to inspect if any injected scripts run on pages using the plugin.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this stored XSS vulnerability in Simple Link Directory, the immediate step is to update the plugin to a version later than 9.0.4 where the issue is fixed.

If an update is not immediately available, consider disabling or removing the plugin until a patch is released.

Additionally, review and sanitize any user input or options related to sld_no_results_found to ensure no malicious scripts can be injected.

Implementing a Web Application Firewall (WAF) that can detect and block XSS payloads may also help reduce risk temporarily.

Useful 0 Not Useful 0

Compliance Impact

The provided information does not specify how the CVE-2026-53741 vulnerability impacts compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0