Webfactoryltd External Links In New Window \/ New Tab vulnerabilities

2 vulnerabilities

Known vulnerabilities in Webfactoryltd External Links In New Window \/ New Tab, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2022-1583unknownexternal links in new window / new tab+2
EPSS score
1.34%
The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.6.1CVE-2022-1582unknownexternal links in new window / new tab+2
EPSS score
0.80%
The External Links in New Window / New Tab WordPress plugin before 1.43 does not properly escape URLs it concatenates to onclick event handlers, which makes Stored Cross-Site Scripting attacks possible.