Vulnerabilities

TI-2022-01454 CVE-2022-1583 · GHSA-fh98-fx6f-2pf6

External Links in New Window / New Tab < 1.43 - Tabnabbing

LOW 32

The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01337 Published 2022-05-30 Fixed in 1.43 CWE-1022

TI-2022-01453 CVE-2022-1582 · GHSA-pgjp-w5pj-5rg7

External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site Scripting

LOW 29

The External Links in New Window / New Tab WordPress plugin before 1.43 does not properly escape URLs it concatenates to onclick event handlers, which makes Stored Cross-Site Scripting attacks possible.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-30 Fixed in 1.43 CWE-79

Vulnerabilities

Filters

External Links in New Window / New Tab < 1.43 - Tabnabbing

External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site Scripting