CVE-2026-7501

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-7501
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7501.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-7501
Published
2026-04-30T20:45:12.021Z
Modified
2026-07-15T01:49:15.219978780Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
LinkStackOrg LinkStack UserController.php editPage cross site scripting
Details

A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulation of the argument pageDescription can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a pull request but has not reacted yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7501.json"
}
References

Affected packages

Git / github.com/linkstackorg/linkstack

Affected ranges

Type
GIT
Repo
https://github.com/linkstackorg/linkstack
Events
Introduced
ae6837e8c0cc2cd0e77f26952ceca97d0eebec35
Last affected
dca586e8b8946a779cb212d21791cff6308fa7c0
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "4.8.0"
        },
        {
            "last_affected": "4.8.0"
        },
        {
            "introduced": "4.8.1"
        },
        {
            "last_affected": "4.8.1"
        },
        {
            "introduced": "4.8.2"
        },
        {
            "last_affected": "4.8.2"
        },
        {
            "introduced": "4.8.3"
        },
        {
            "last_affected": "4.8.3"
        },
        {
            "introduced": "4.8.4"
        },
        {
            "last_affected": "4.8.4"
        },
        {
            "introduced": "4.8.5"
        },
        {
            "last_affected": "4.8.5"
        },
        {
            "introduced": "4.8.6"
        },
        {
            "last_affected": "4.8.6"
        }
    ]
}

Affected versions

4.*
4.8.0
4.8.1
4.8.2
4.8.3
4.8.4
4.8.5
4.8.6
v4.*
v4.8.0
v4.8.1
v4.8.2
v4.8.3
v4.8.4
v4.8.5
v4.8.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7501.json"