medium6.1Public exploit code
CVE-2021-24286
The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Redirect 404 to Parent 1.3.0 - Reflected Cross-Site Scripting2021-09-29 · webapps · php
Impact
The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mooveagency | Redirect 404 To Parent | before 1.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164328/WordPress-Redirect-404-To-Parent-1.3.0-Cross-Site-Scripting.html
- https://wpscan.com/vulnerability/b9a535f3-cb0b-46fe-b345-da3462584e27
- http://packetstormsecurity.com/files/164328/WordPress-Redirect-404-To-Parent-1.3.0-Cross-Site-Scripting.html
- https://wpscan.com/vulnerability/b9a535f3-cb0b-46fe-b345-da3462584e27