← CVE Intelligence

CVE-2021-24536

Custom Login Redirect <= 1.0.0 - CSRF to Stored XSS PUBLISHED

Description (CNA)

The Custom Login Redirect WordPress plugin through 1.0.0 does not have CSRF check in place when saving its settings, and do not sanitise or escape user input before outputting them back in the page, leading to a Stored Cross-Site Scripting issue

Affected (CNA)

Vendor / productVersions
Unknown / Custom Login Redirectaffected 1.0.0 through 1.0.0

CWE

CWE-79, CWE-352

References

ADP enrichment

CVE

No English description supplied.