CVE-2022-1583
External Links in New Window / New Tab < 1.43 - Tabnabbing
MEDIUM 6.5EPSS 1.3%
The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.
- Affected
- External Links in New Window / New Tab
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N - EPSS
- 1.34% chance of exploitation in the next 30 days, 71st percentile
- Published
- 2022-05-30
- Updated
- 2024-08-03