CVE-2016-4833

CVE-2016-4833 refers to a cross-site scripting (XSS) vulnerability in the WordPress plugin Nofollow Links , present in versions before 1.0.11. The flaw allows an attacker to inject arbitrary script/HTML via unspecified vectors in the plugin’s handling of inputs. Likely impact is that an administr...