CVE-2017-15863

Cross Site Scripting XSS exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php...

CVE-2017-15863

CVE-2017-15863 concerns the WordPress plugin wp-noexternallinks, affected prior to 3.5.19. The flaw is a Cross-Site Scripting (XSS) in which the parameters date1 or date2 to wp-admin/options-general.php can be exploited to inject malicious JavaScript. The issue originates from handling unsanitize...