medium5.4
CVE-2024-1849
The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URL
Impact
The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URL
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gowebsolutions | Wp Customer Reviews | before 3.7.1 |