Unknown 404 SEO Redirection vulnerabilities
2 vulnerabilities
Known vulnerabilities in Unknown 404 SEO Redirection, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-24324clogica · all_404_redirect_to_homepage +2 more404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issuesEPSS0.56%MediumCVE-2021-24325clogica · seo_redirection_plugin +2 more404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS)The tab parameter of the settings page of the 404 SEO Redirection WordPress plugin through 1.3 is vulnerable to a reflected Cross-Site Scripting (XSS) issue as user input is not properly sanitised or escaped before being output in an attribute.EPSS0.83%