Index
Bugtraq
Pełna lista
Błędy
Sztuczki
Exploity
Dorks list
Tylko z CVE
Tylko z CWE
Bogus
Ranking
CVEMAP
Świeża lista CVE
Producenci
Produkty
Słownik CWE
Sprawdź nr. CVE
Sprawdź nr. CWE
Szukaj
W Bugtraq
W bazie CVE
Po autorze
Po nr. CVE
Po nr. CWE
Po producencie
Po produkcie
RSS
Bugtraq
CVEMAP
CVE Produkty
Tylko Błędy
Tylko Exploity
Tylko Dorks
Więcej
cIFrex
Facebook
Twitter
Donate
O bazie
Lang
Polish
English
Submit
Podatności dla
'All in one wp security \& firewall'
2022-05-02
CVE-2021-25102
CWE-79
The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redirect as well as Cross-Site Scripting issue. Exploitation of this issue requires the Login Page URL value to be known, which should be hard to guess, reducing the risk
>>>
Vendor:
Tipsandtricks-hq
12
Produkty
Wordpress simple paypal shopping cart
All in one wp security & firewall
Category specific rss feed subscription
Simple download monitor
Wp security \& firewall
Software license manager
Wp video lightbox
Compact wp audio player
Far future expiry header
All in one wp security \& firewall
Wp simple adsense insertion
Accept stripe
Copyright
2024
, cxsecurity.com
Back to Top