Not rated
CVE-2021-24327 The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and…
Description
The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SEO Redirection Plugin – 301 Redirect Manager 6.4 | earliest → < 6.4 | 6.4 |