Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24401

WP Domain Redirect <= 1.0 - Authenticated SQL Injection

Description

The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an `editid` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Domain Redirect

  • 1.0 to ≤ 1.0affected

References