NuytsTech Security

CVE-2017-15863

by ·

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.

Date published : 2017-10-24

http://lists.openwall.net/full-disclosure/2017/06/02/3

https://wordpress.org/plugins/wp-noexternallinks/#developers

Tags: