CVE-2021-24187

The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to reflected Cross-Site Scripting XSS as user input is not properly sanitised before being output in an attribute...

Cross site scripting

The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to reflected Cross-Site Scripting XSS as user input is not properly sanitised before being output in an attribute...

CVE-2021-24187

The CVE-2021-24187 entry affects the WordPress SEO Redirection Plugin ("301 Redirect Manager") prior to v6.4. The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by user input not being properly sanitised before output in an attribute. Impact is reflected XSS, with an attack s...

WordPress 301 Redirects - Easy Redirect Manager Plugin < 2.51 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webfactoryltd:301redirects"; ifdescription...

CVE-2021-24142

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections...

CVE-2021-24142 301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections...

CVE-2021-24142

The CVE-2021-24142 entry concerns the WordPress plugin 301 Redirects – Easy Redirect Manager. Public sources in the connected documents confirm that versions prior to 2.51 are affected by an SQL injection vulnerability caused by unvalidated input in the Redirect From column during CSV import. The...

301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

The plugin does not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections. The PoC video provided mentioned 2.53 as vulnerable, however v2.45 was installed and used. The issue has been verified to have been fixed in 2.51 PoC POST...

[SECURITY] Fedora 33 Update: kernel-5.8.15-301.fc33

The kernel meta package...

Open Redirect in ecstatic

Versions of ecstatic prior to 4.1.2, 3.3.2 or 2.2.2 are vulnerable to Open Redirect. The package fails to validate redirects, allowing attackers to craft requests that result in an HTTP 301 redirect to any other domains. Recommendation If using ecstatic 4.x, upgrade to 4.1.2 or later. If using...

GHSA-9Q64-MPXX-87FG Open Redirect in ecstatic

Versions of ecstatic prior to 4.1.2, 3.3.2 or 2.2.2 are vulnerable to Open Redirect. The package fails to validate redirects, allowing attackers to craft requests that result in an HTTP 301 redirect to any other domains. Recommendation If using ecstatic 4.x, upgrade to 4.1.2 or later. If using...

Mail.ru: CRLF Injection in 301 Redirect allow to Set-Cookies for mail.ru

CRLF injection in HTTP 301 reply on 1l-go.mail.ru...

WordPress 301 Redirects plugin <= 2.40 - Authenticated Arbitrary Redirect Injection, XSS, and CSRF vulnerabilities

Authenticated Arbitrary Redirect Injection, XSS, and CSRF vulnerabilities found by Chloe Chamberland in WordPress 301 Redirects plugin versions = 2.40. Solution Update the WordPress 301 Redirects plugin to the latest available version at least 2.45...

CVE-2019-19915

The CVE-2019-19915 entry concerns the WordPress plugin 301 Redirects - Easy Redirect Manager (pre-2.45). Several connected sources confirm that authenticated users (subscriber or higher) can modify, delete, or inject redirect rules via the admin-ajax actions eps_redirect_save and eps_redirect_del...

301 Redirects - Easy Redirect Manager <= 2.40 - Authenticated Arbitrary Redirect Injection and Modification, XSS, and CSRF

The weaknesses allow for any authenticated user, even subscribers, to modify, delete, and inject redirect rules that could potentially result in a loss of site availability, in addition to XSS and CSRF. PoC...

[SECURITY] Fedora 31 Update: kernel-5.3.7-301.fc31

The kernel meta package...

WordPress Simple 301 Redirects Plugin < 1.25 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

CVE-2019-15776

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file...

Crlf injection

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file...

CVE-2019-15776

The CVE-2019-15776 entry concerns the WordPress plugin simple-301-redirects-addon-bulk-uploader before v1.2.5, which lacks protection against 301 redirect rule injection via a CSV file. Connected sources indicate a vulnerability enabling unintended redirects (potentially redirecting site traffic ...