← CVE Intelligence

CVE-2021-24324

404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues

Affected (CNA)

Vendor / productVersions
Unknown / 404 SEO Redirectionaffected 1.3 through 1.3

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.