Vulnerabilities

TI-2017-12487 CVE-2017-16955 · GHSA-f483-r579-gvcq

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows…

MEDIUM 42

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to /wp-admin/options-general.php?page=inlinks/inlinks.p…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02002 Published 2017-11-27 No fix listed CWE-89

TI-2015-03645 CVE-2015-4347 · GHSA-q8xh-5hf9-9qh7

Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal…

LOW 22

Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified path arguments.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2015-06-15 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows…

Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal…