CVE-2016-11005

The CVE-2016-11005 entry refers to the InstaLinker WordPress plugin (before 1.1.2). Affected component: includes/instalinker-admin-preview.php. Root cause: insufficient input sanitization of client_id leads to a reflected XSS vulnerability. Impact: could execute arbitrary script in a user’s brows...