Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25028

Event Tickets < 5.2.2 - Open Redirect

Description

The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Event Tickets

  • 5.2.2 to < 5.2.2affected

References