Security Advisory
CVE-2017-15863
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.