Skip to content
Sign in
Not rated

CVE-2021-24324 The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to…

Description

The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues

Affected products and versions

Product Affected versions Fixed in
404 SEO Redirection 1.3 No fix stated

Other CVEs of 404 SEO Redirection

The 2 CVEs of 404 SEO Redirection →
CVE-2021-24325 The tab parameter of the settings page of the 404 SEO Redirection WordPress plugin through 1.3 is vulnerable to a… Not rated
Track this CVE