CVE Database /
CVE-2024-8981
CVE · High
CVE-2024-8981 — Broken Link Checker [broken-link-checker] < 2.4.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-8981
|
Broken Link Checker [broken-link-checker] < 2.4.1 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
High
7.1
|
< 2.4.1
|
2.4.1 |
2024-09-30 |
—
|
CVE-2024-8981
The Broken Link Checker plugin for WordPress contains a security flaw in its handling of URLs. Specifically, the use of add_query_arg in class-view.php is not properly sanitized, allowing malicious actors to inject arbitrary code into pages that are executed when certain actions are triggered by users. This vulnerability affects all versions up to and including 2.4.0.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings