Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a manipulation of the argument pageDescription can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a pull request but has not reacted yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-30 | 2 | Disclosure1General1 |
| 2026-05-01 | 1 | Disclosure1 |
CVE-2026-7501 A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a… https://www.cve.org/CVERecord?id=CVE-2026-7501
Post summary
The text announces CVE-2026-7501 as a weakness in LinkStack up to 4.8.6 affecting the editPage function, but provides no further technical details, exploit, or mitigation information.
CVE-2026-7501 Cross Site Scripting in LinkStackOrg LinkStack Up to 4.8.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7501
Post summary
A new Cross Site Scripting vulnerability (CVE‑2026‑7501) affecting LinkStack up to version 4.8.6 has been identified, with details available on Vulmon.
🚨*CVE* CVE-2026-7501 A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6. Impacted is the function editPage of the file app/Http/Controllers/UserController.php. Executing a… https://www.cve.org/CVERecord?id=CVE-2026-7501 ----- Traducción: CVE-2026-7501 Se … http://infoflow.cloud`
Post summary
A brief disclosure announces CVE‑2026‑7501, highlighting a weakness in LinkStack up to version 4.8.6 affecting the editPage function, and links to the official CVE record.