Skip to content
OpenAdvisories
Unscored CVE-2021-24142 EUVD-2021-11056GHSA-8w3p-34v2-ghhr

301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

Published Mar 18, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections.

Affected products

VendorProductAffectedFixed
— 301 Redirects - Easy Redirect Manager 2.51 – < 2.51 2.51

References