Lucene search
PRIOn knowledge basePRION:CVE-2021-24838HistoryJan 17, 2022 - 1:15 p.m.
Open redirect
2022-01-1713:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
43.6%
The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| anycomment | lt | 0.3.5 |
Related
cve
cve
CVE-2021-24838
2022-01-17 13:15:07
patchstack
patchstack
WordPress AnyComment plugin <= 0.3.4 - Open Redirect vulnerability
2021-12-20 00:00:00
cvelist
cvelist
CVE-2021-24838 AnyComment < 0.3.5 - Open Redirect
2022-01-17 13:00:27
nuclei
nuclei
WordPress AnyComment <0.3.5 - Open Redirect
2022-01-25 11:44:00
wpvulndb
wpvulndb
AnyComment <= 0.3.1 - Open Redirect
2021-12-20 00:00:00
nvd
nvd
CVE-2021-24838
2022-01-17 13:15:07
wpexploit
wpexploit
AnyComment <= 0.3.1 - Open Redirect
2021-12-20 00:00:00