Lucene search
WPScanCVELIST:CVE-2021-24327HistoryMay 17, 2021 - 4:48 p.m.
CVE-2021-24327 SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)
2021-05-1716:48:54
CWE-79
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
24.8%
The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads
CNA Affected
[
{
"product": "SEO Redirection Plugin – 301 Redirect Manager",
"vendor": "Unknown",
"versions": [
{
"lessThan": "6.4",
"status": "affected",
"version": "6.4",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)
2021-04-16 00:00:00
cve
cve
CVE-2021-24327
2021-05-17 17:15:08
patchstack
patchstack
wpexploit
wpexploit
SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)
2021-04-16 00:00:00
nvd
nvd
CVE-2021-24327
2021-05-17 17:15:08
prion
prion
Design/Logic Flaw
2021-05-17 17:15:00