Skip to content
OpenAdvisories
Unscored CVE-2021-24325 EUVD-2021-11238GHSA-9v3q-48wp-mx8v

404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS)

Published May 17, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The tab parameter of the settings page of the 404 SEO Redirection WordPress plugin through 1.3 is vulnerable to a reflected Cross-Site Scripting (XSS) issue as user input is not properly sanitised or escaped before being output in an attribute.

Affected products

VendorProductAffectedFixed
— 404 SEO Redirection 1.3 – ≤ 1.3 —

References