CVE-2024-0337

2024-03-2005:15:45

[email protected]

web.nvd.nist.gov

cve-2024-0337

travelpayouts

wordpress plugin

open redirect

nvd

security vulnerability

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.1%

JSON

The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due to insufficient validation on the travelpayouts_redirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

VendorProductVersionCPE
web\-settlersocial_feed_\|_all_social_media_in_one_place*cpe:2.3:a:web\-settler:social_feed_\|_all_social_media_in_one_place:*:*:*:*:*:*:*:*