What’s Vulnerable › Vulnerabilities

CVE-2017-15863

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-24 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.

Affected products

• nicolly WP No External Links: through 3.5.18

References

• http://lists.openwall.net/full-disclosure/2017/06/02/3
• https://wordpress.org/plugins/wp-noexternallinks/#developers
• http://lists.openwall.net/full-disclosure/2017/06/02/3
• https://wordpress.org/plugins/wp-noexternallinks/#developers

Get alerted when CVE-2017-15863 or the next vulnerability affects your stack