Skip to content
Sign in
Not rated

CVE-2021-24854 The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could…

Description

The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
QR Redirector 1.6 earliest → < 1.6.1 1.6.1

Other CVEs of QR Redirector

The 2 CVEs of QR Redirector →
CVE-2021-24853 The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector… Not rated
Track this CVE