Medium · 6.1 CVE-2024-24889 EUVD-2024-22252GHSA-f8gm-9px2-mw95

WordPress All 404 Pages Redirect to Homepage Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)

Published Feb 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Geek Code Lab Product: All 404 Pages Redirect to Homepage

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Geek Code Lab All 404 Pages Redirect to Homepage allows Stored XSS.This issue affects All 404 Pages Redirect to Homepage: from n/a through 1.9.

Affected products

Vendor	Product	Affected	Fixed
Geek Code Lab	All 404 Pages Redirect to Homepage	≤ 1.9	—

References

https://patchstack.com/database/vulnerability/all-404-pages-redirect-to-homepage/wordpress-all-404-pages-redirect-to-homepage-plugin-1-9-unauthenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry