Lucene search
WPScanCVELIST:CVE-2021-24326HistoryMay 17, 2021 - 4:48 p.m.
CVE-2021-24326 All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)
2021-05-1716:48:54
CWE-79
WPScan
www.cve.org
1
0.001 Low
EPSS
Percentile
24.8%
The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitised before being output in an attribute.
CNA Affected
[
{
"product": "All 404 Redirect to Homepage",
"vendor": "Unknown",
"versions": [
{
"lessThan": "1.21",
"status": "affected",
"version": "1.21",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2021-24326
2021-05-17 17:15:08
nvd
nvd
CVE-2021-24326
2021-05-17 17:15:08
openvas
openvas
WordPress All 404 Redirect to Homepage Plugin < 1.21 XSS Vulnerability
2023-04-25 00:00:00
wpexploit
wpexploit
wpvulndb
wpvulndb
prion
prion
Cross site scripting
2021-05-17 17:15:00