Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24142

301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown 301 Redirects - Easy Redirect Manager

  • 2.51 to < 2.51affected

References