CVE-2021-24838

creationtimestamp| type| source ---|---|--- 2022-01-17 16:23:16+00:00| seen| https://t.me/cibsecurity/35666 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24838.yaml...

CVE-2021-24838

CVE-2021-24838 affects the WordPress AnyComment plugin prior to 0.3.5. An API endpoint passes user input via the redirect parameter to wp_redirect() without validation, causing an open redirect. This could allow an attacker to redirect users to a malicious site. Remediation: update to version 0.3...

CVE-2021-24838 AnyComment < 0.3.5 - Open Redirect

The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wpredirect function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature...