Description
Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_passthrough.php.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- b2evolution CMS <6.11.6 - Open Redirect http/cves/2020/CVE-2020-22840.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.