Open redirect

Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirectto parameter in emailpassthrough.php...

CVE-2020-22840

CVE-2020-22840 affects b2evolution CMS prior to 6.11.6. It is an open redirect in email_passthrough.php via the redirect_to parameter, enabling redirects to attacker-controlled sites. Reported impact includes phishing and data exposure risks; PoCs exist (e.g., exploit-db 49554) and public templat...