The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/63a24890-3735-4016-b4b7-4b070a842664 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: WPScan
Published: 2021-05-17T16:48:53
Updated: 2021-05-17T16:48:53
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24324
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-05-17T17:15:08.430
Modified: 2021-05-24T16:08:41.000
Link: CVE-2021-24324
JSON object: View
Redhat Information
No data.
CWE