Description
The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | BetterLinks – Shorten, Track and Manage any URL | 1.2.6 – < 1.2.6 | 1.2.6 |