CVE-2025-39547

Cross-Site Request Forgery CSRF vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Stored XSS.This issue affects Internal Link Optimiser: from n/a through = 5.1.3...

CVE-2025-39547

creationtimestamp| type| source ---|---|--- 2025-04-16 13:45:59+00:00| seen| https://bsky.app/profile/potato.software/post/3lmwq2oz54n2v 2025-04-16 13:56:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12044...

CVE-2025-39547

CVE-2025-39547 is a CSRF-to-Stored-XSS vulnerability in the WordPress plugin Internal Link Optimiser (versions up to 5.1.3). The issue arises from cross-site requests that can inject stored XSS through the plugin’s handling of Internal Link Optimiser actions. Public documentation confirms the aff...

CVE-2025-39547 WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Stored XSS.This issue affects Internal Link Optimiser: from n/a through = 5.1.3...