WordPress WP No External Links plugin version 3.5.15 suffers from a cross site scripting vulnerability.