CVE-2022-1582 External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site Scripting

The External Links in New Window / New Tab WordPress plugin before 1.43 does not properly escape URLs it concatenates to onclick event handlers, which makes Stored Cross-Site Scripting attacks possible...

CVE-2022-1582

The CVE-2022-1582 entry concerns the WordPress plugin External Links in New Window / New Tab, vulnerable in versions prior to 1.43. The vulnerability arises because the plugin does not properly escape URLs that it concatenates to onclick event handlers, enabling Stored Cross-Site Scripting. Affec...