medium6.1
CVE-2017-15863
Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.
Impact
Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp No External Links Project | Wp No External Links | through 3.5.18 |