CVE-2022-28353: External Redirect Warning Project External Redirect Warning

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

In the External Redirect Warning Plugin 1.3 for MyBB, the redirect URL (aka external.php?url=) is vulnerable to XSS.

Affected products

• External Redirect Warning Project External Redirect Warning: version 1.3 only

Published 2023-04-16. Last modified 2026-06-17.