Unscored CVE-2019-6267 EUVD-2019-15833GHSA-47c2-9429-8m55

The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is mishandled during log vi…

Published Jan 15, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is mishandled during log viewing at the templates/admin/redirect-log.php URI.

References

https://wordpress.org/plugins/easy-redirect-manager/#developers
https://www.logicallysecure.com/blog/ls-team-discovers-xss-in-wordpress-plugin/
https://wpvulndb.com/vulnerabilities/9203