Link Log Vulnerabilities

The Smart External Link Click Monitor [Link Log] plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that exe...

CVSS:

6.1

Affected:

up to 5.0.2

Fix:

No patched version reported

Disclosed:

Dec 5, 2023

CVE-2023-49771 on NVD →

The Smart External Link Click Monitor [Link Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permis...

CVSS:

4.4

Affected:

up to 5.0.2

Fix:

No patched version reported

Disclosed:

Dec 5, 2023

CVE-2023-49770 on NVD →

The link-log plugin before 2.1 for WordPress has SQL injection via the ipaddress parameter.

CVSS:

9.8

Affected:

up to 2.1

Fixed in:

2.1

Disclosed:

Dec 11, 2015

CVE-2015-9344 on NVD →

The Link Log plugin for WordPress is vulnerable to HTTP Response Splitting in versions up to, and including 1.4. This is due to improper input validation. This makes it possible for unauthenticated attackers to perform various other future attacks such as XSS, Cross-User Defacement, Web Cache Poisoning, etc.

CVSS:

7.5

Affected:

up to 1.4

Fixed in:

2.0

Disclosed:

Apr 28, 2015

CVE-2015-9345 on NVD →