Skip to content
Sign in
4.8 Medium

CVE-2022-3922 The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could…

Description

The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Affected products and versions

Product Affected versions Fixed in
Broken Link Checker 1.11 earliest → < 1.11.20 1.11.20

Other CVEs of Broken Link Checker

The 3 CVEs of Broken Link Checker →
CVE-2026-18937 The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input… 9.0 Critical CVE-2024-10903 The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them,… 4.7 Medium
Track this CVE