No External Links

No External Links has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 5.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 3 issues recorded for No External Links has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all No External Links vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-95670

No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect

Read the full analysis

Vulnerability Records

3 records


2026-10-01 19:17	No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect No External Links <= 5.2.0	`CVE-2026-95670`	7.2 High	Afifudin Maarif	Yes
2025-09-22 00:00	No External Links <= 5.1.6.2 - Cross-Site Request Forgery No External Links <= 5.1.6.2	`CVE-2025-53451`	4.3 Medium	Bao - BlueRock	Yes
2022-05-27 00:00	Mihdan: No External Links <= 4.7.4 - Cross-Site Scripting No External Links <= 4.7.4	`CVE-2022-1095`	5.5 Medium	Vaibhav Nitin Gaikwad	Yes

Showing 1–3 of 3 reports