CVE-2023-6786 — Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect

CVE-2023-6786

Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect PUBLISHED

Description (CNA)

The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue

Affected (CNA)

Vendor / product	Versions
Unknown / Payment Gateway for Telcell	affected 0 through 2.0.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/f3e64947-3138-4ec4-86c4-27b5d6a5c9c2/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.