CVEs (1)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Ultimate Nofollow Project 1Ultimate Nofollow Jun 17, 2026 Dec 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The Ultimate NoFollow WordPress plugin through 1.4.8 does not sanitise and escape the href attribute of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks |