CVE-2021-24324

The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues...

CVE-2021-24324

CVE-2021-24324 affects the WordPress plugin “404 SEO Redirection” (versions up to and including 1.3). The root cause is missing CSRF checks in all settings, with some fields lacking proper sanitisation/escaping, which could enable a logged-in attacker to change plugin settings and potentially tri...