Wp No External Links ProjectWp No External Links
2 matches found
CVE-2017-15863
CVE-2017-15863 concerns the WordPress plugin wp-noexternallinks, affected prior to 3.5.19. The flaw is a Cross-Site Scripting (XSS) in which the parameters date1 or date2 to wp-admin/options-general.php can be exploited to inject malicious JavaScript. The issue originates from handling unsanitize...
6.1CVSS6AI score0.00954EPSS
Save