Skip to content
Threat Feed
Subscribe

Product

No External Links (<= 5.2.0)

1 brief RSS
high advisory

Stored XSS Vulnerability in No External Links WordPress Plugin

The No External Links WordPress plugin (<= 5.2.0) is vulnerable to Stored Cross-Site Scripting (XSS) via the /goto/ redirect feature, allowing unauthenticated attackers to inject malicious scripts.

No External Links wordpress xss web-application vulnerability
1r 1t 1c