Skip to content
Sign in
Not rated

CVE-2021-24847 The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before…

Description

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is also installed

Affected products and versions

Product Affected versions Fixed in
SEO Redirection Plugin – 301 Redirect Manager 8.2 earliest → < 8.2 8.2

Other CVEs of SEO Redirection Plugin – 301 Redirect Manager

The 2 CVEs of SEO Redirection Plugin – 301 Redirect Manager →
CVE-2021-24327 The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and… Not rated
Track this CVE