Non notée
CVE-2021-24324 The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to…
Description
The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 404 SEO Redirection | 1.3 | Pas de correctif indiqué |