Cpe:2.3:a:no_external_links_project:no_external_links:*:*:*:*:*:wordpress:*:*

The No External Links WordPress plugin (<= 5.2.0) is vulnerable to Stored Cross-Site Scripting (XSS) via the /goto/ redirect feature, allowing unauthenticated attackers to inject malicious scripts.