CVE-2014-125105 – Broken Link Checker Plugin Settings Page core.php options_page cross site scripting

https://notcve.org/view.php?id=CVE-2014-125105

05 Dec 2014 — A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function options_page of the file core/core.php of the component Settings Page. The manipulation of the argument exclusion_list/blc_custom_fields leads to cross site scripting. The attack can be launched remotely. • https://github.com/wp-plugins/broken-link-checker/commit/90615fe9b0b6f9e6fb254d503c302e53a202e561 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •