| Package | Affected versions | Patched versions |
|---|---|---|
| broken link checker | ≤ 1.11.8 |
A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the wp-admin/tools.php?page=view-broken-links s_filter parameter in a search action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free