← Back

Internallinkjuicer

internallinkjuicer

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Internal Link Juicer
internal_link_juicer
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-0657
1Internallinkjuicer
1Internal Link Juicer
Jun 17, 2026
Feb 9, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
The Internal Link Juicer: SEO Auto Linker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings such as 'ilj_settings_field_links_per_page' in all versions up to, and includi...Show more
The Internal Link Juicer: SEO Auto Linker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings such as 'ilj_settings_field_links_per_page' in all versions up to, and including, 2.23.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.Show less