Lucene search
K

CVE-2021-24165

🗓️ 05 Apr 2021 18:27:43Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 67 Views🌐 WEB

Ninja Forms Contact Form WordPress plugin before 3.4.34 open redirect vulnerabilit

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2021-24165
27 Apr 202309:58
circl
CNNVD
WordPress Ninja Forms Contact Form 输入验证错误漏洞
5 Apr 202100:00
cnnvd
Cvelist
CVE-2021-24165 Ninja Forms < 3.4.34 - Administrator Open Redirect
5 Apr 202118:27
cvelist
EUVD
EUVD-2021-11079
7 Oct 202500:30
euvd
Nuclei
WordPress Ninja Forms <3.4.34 - Open Redirect
7 Jun 202603:02
nuclei
NVD
CVE-2021-24165
5 Apr 202119:15
nvd
Prion
Open redirect
5 Apr 202119:15
prion
RedhatCVE
CVE-2021-24165
22 May 202521:05
redhatcve
Tenable Nessus
Ninja Forms Plugin for WordPress < 3.4.34 Multiple Vulnerabilities
3 Mar 202100:00
nessus
wpexploit
Ninja Forms < 3.4.34 - Administrator Open Redirect
16 Feb 202100:00
wpexploit
Rows per page
NVD
Vulners
Node
ninjaformsninja_formsRange<3.4.34wordpress
[
  {
    "product": "Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.4.34",
        "status": "affected",
        "version": "3.4.34",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
redirectquery param/wp-admin/admin-ajax.php?client_id=1&redirect=https://google.com&action=nf_oauth_connectOpen redirect via user-supplied redirect parameter in wp_ajax_nf_oauth_connectCWE-601

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:52Current
6.2Medium risk
Vulners AI Score6.2
CVSS 25.8
CVSS 3.16.1
EPSS0.01173
67