CVE-2017-15863

Publication date

2017-10-24 18:00:00

Family

mitre

State

PUBLISHED

Description

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.