CVE-2017-15863 | BDVDB-2026-92219 Detail

Description#

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.openwall.net/full-disclosure/2017/06/02/3
https://wordpress.org/plugins/wp-noexternallinks/#developers

Exploit#

No public exploit known

History#

Version 12017-10-24Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.