Skip to content
OpenAdvisories

Vendor

LinkStackOrg

5 known vulnerabilities.

5 results · Feed

  • Medium 4.3

    LinkStackOrg LinkStack cross-site request forgery

    A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The vendor was contacted ea…

  • Medium 5.4

    LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization

    A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected element is the function saveLink of the file app/Http/Controllers/UserController.php of the component Management Endpoint. The manipulation leads to authorization b…

  • Low 3.5

    LinkStackOrg LinkStack UserController.php editPage cross site scripting

    A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulation of the argument pageDescription can lead to cross site scripting. It is possi…

  • Medium 4.1

    Insufficient Session Expiration in linkstackorg/linkstack

    Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.

  • Medium 6.5

    Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack

    Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.