CVE-2023-26537 WordPress WP No External Links Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nicolly WP No External Links plugin <= 1.0.2 versions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nicolly WP No External Links | <= 1.0.2 | No fix listed |
| wp no external links project wp no external links | <= 1.0.2 | No fix listed |
| wordpress no-external-links(WordPress) | <= 1.0.2 | No fix listed |
References
- patchstack.com third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org