Aller au contenu
Se connecter
Non notée

CVE-2021-24838 The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to…

Description

The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature.

Produits et versions touchés

Produit Versions touchées Corrigé en
AnyComment 0.3 premières → < 0.3.5 0.3.5

Autres CVE de AnyComment

Les 3 CVE de AnyComment →
CVE-2022-0279 The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply,… Non notée CVE-2022-0134 The AnyComment WordPress plugin before 0.2.18 does not have CSRF checks in the Import and Revert HyperComments features,… Non notée
Suivre cette CVE