EUVD-2017-7285

Malware in sbrugna...

CVE-2017-15863

Cross Site Scripting XSS exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php...

Cross site scripting

Cross Site Scripting XSS exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php...

CVE-2017-15863

Cross Site Scripting XSS exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php...

CVE-2017-15863

CVE-2017-15863 concerns the WordPress plugin wp-noexternallinks, affected prior to 3.5.19. The flaw is a Cross-Site Scripting (XSS) in which the parameters date1 or date2 to wp-admin/options-general.php can be exploited to inject malicious JavaScript. The issue originates from handling unsanitize...

CVE-2017-15863: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php...

PT-2017-14245

Name of the Vulnerable Software and Affected Versions wp-noexternallinks plugin versions prior to 3.5.19 Description A Cross Site Scripting XSS issue exists, allowing exploitation via the date1 or date2 parameter to the "wp-admin/options-general.php" API endpoint. Recommendations For versions pri...