Wp Js External Link Info Vulnerabilities

WordPress JS External Link Info is vulnerable to open redirect vulnerability. This plugin is cloded, you should find an alternative.

Affected:

up to 1.22

Fixed in:

1.22

Disclosed:

Jan 11, 2016

This plugin is prone to a cross site scripting vulnerability via redirect.php blog parameter. Update the plugin.

Affected:

up to 1.22

Fixed in:

1.22

Disclosed:

Aug 1, 2014

The WP Js External Link Info plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url’ and ‘blog’ parameters in versions up to, and including, 1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVSS:

6.1

Affected:

up to 1.21

Fix:

No patched version reported

Disclosed:

Apr 16, 2014

The WP Js External Link Info plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url’ and ‘blog’ parameters in versions up to, and including, 1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

Affected:

up to 1.21

Fix:

No patched version reported

Disclosed:

Apr 16, 2014

The wp-js-external-link-info WordPress plugin was affected by a redirect.php blog Parameter XSS security vulnerability.

Affected:

up to 1.21

Fix:

No patched version reported