RSS   Vulnerabilities for 'Seo redirection plugin'   RSS

2021-05-17
 
CVE-2021-24325

CWE-79
 

 
The tab parameter of the settings page of the 404 SEO Redirection WordPress plugin through 1.3 is vulnerable to a reflected Cross-Site Scripting (XSS) issue as user input is not properly sanitised or escaped before being output in an attribute.

 
 
CVE-2021-24327

CWE-79
 

 
The SEO Redirection Plugin ??�??�?? 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads

 

 >>> Vendor: Clogica 3 Products
Seo redirection
All 404 redirect to homepage
Seo redirection plugin


Copyright 2024, cxsecurity.com

 

Back to Top