Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24324

404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown 404 SEO Redirection

  • 1.3 to ≤ 1.3affected

References