XSS in Kovah Linkace

CVE-2026-45343

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, LinkAce contains a stored cross-site scripting vulnerability that allows a low-privilege user to execute arbitrary JavaScript in an administrator's browser session…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.