← CVE Intelligence

CVE-2024-1849

WP Customer Reviews < 3.7.1 - Malicious Redirect via HTTP-EQUIV Injection PUBLISHED

Description (CNA)

The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URL

Affected (CNA)

Vendor / productVersions
Unknown / WP Customer Reviewsaffected 0 before 3.7.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.