CVE-2019-17207

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker aka Broken Link Checker plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the...

CVE-2019-17207

The CVE concerns the WordPress Broken Link Checker plugin (version 1.11.8) where the vulnerability resides in includes/admin/table-printer.php. A reflected cross-site scripting (XSS) flaw is triggered via the s_filter parameter in the admin tools page (wp-admin/tools.php?page=view-broken-links), ...

WordPress Broken Link Checker 1.11.8 Cross Site Scripting

Document Title =============== Reflected XSS via Broken Link Checker v.1.11.8 WordPress plugin. Product Description =============== Broken Link Checker will monitor your blog looking for broken links and let you know if any are found. Homepage: https://managewp.com/ WordPress Plugin:...