Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24853

QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect response status code of arbitrary QR Redirects

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown QR Redirector

  • 1.6 to < 1.6affected

References