Description
Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and contributed modules. This vulnerability could allow an attacker to trick users into unwillingly navigating to an external site.
Remediation
References
Related Vulnerabilities
WordPress Plugin Crony Cronjob Manager Multiple Vulnerabilities (0.4.4)
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.7)
MySQL CVE-2012-0115 Vulnerability (CVE-2012-0115)
Oracle Application Server CVE-2010-0070 Vulnerability (CVE-2010-0070)
Oracle Application Server CVE-2008-1814 Vulnerability (CVE-2008-1814)