WordPress Plugin Vulnerabilities

easy-redirect-manager 2.18.18 - Cross-Site Scripting (XSS)

Description

Any page that causes a 404 or 302 response, will be output within the Redirect Log page without any validation or output encoding, including the URL querystring, which could contain an XSS payload.

Affects Plugins

References

Classification

Type
XSS
CWE

Miscellaneous

Original Researcher
LS Team
Submitter
Ryan Dewhurst
Submitter twitter
Verified
No

Timeline

Publicly Published
2019-01-14 (about 7 years ago)
Added
2019-01-15 (about 7 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other