Lucene search
WPScanCVELIST:CVE-2021-24838HistoryJan 17, 2022 - 1:00 p.m.
CVE-2021-24838 AnyComment < 0.3.5 - Open Redirect
2022-01-1713:00:27
CWE-601
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
43.6%
The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature.
CNA Affected
[
{
"product": "AnyComment",
"vendor": "Unknown",
"versions": [
{
"lessThan": "0.3.5",
"status": "affected",
"version": "0.3.5",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2021-24838
2022-01-17 13:15:07
patchstack
patchstack
WordPress AnyComment plugin <= 0.3.4 - Open Redirect vulnerability
2021-12-20 00:00:00
prion
prion
Open redirect
2022-01-17 13:15:00
nuclei
nuclei
WordPress AnyComment <0.3.5 - Open Redirect
2022-01-25 11:44:00
wpvulndb
wpvulndb
AnyComment <= 0.3.1 - Open Redirect
2021-12-20 00:00:00
nvd
nvd
CVE-2021-24838
2022-01-17 13:15:07
wpexploit
wpexploit
AnyComment <= 0.3.1 - Open Redirect
2021-12-20 00:00:00