← CVE Intelligence

CVE-2021-24327

SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads

Affected (CNA)

Vendor / productVersions
Unknown / SEO Redirection Plugin – 301 Redirect Manageraffected 6.4 before 6.4

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.