CVE-2017-15863

CVE-2017-15863

EPSS 1.0%

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.openwall.net/full-disclosure/2017/06/02/3 https://wordpress.org/plugins/wp-noexternallinks/#developers