Unscored CVE-2017-15863 EUVD-2017-7285GHSA-v626-c9xh-rhf4

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin…

Published Oct 24, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.

References

http://lists.openwall.net/full-disclosure/2017/06/02/3
https://wordpress.org/plugins/wp-noexternallinks/#developers