CVE-2024-4900 SEOPress < 7.8 - Contributor+ Open Redirect

2024-06-2406:00:01

WPScan

github.com

seopress

wordpress

plugin

open redirect

vulnerability

cve-2024-4900

contributor

validation

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "SEOPress ",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "7.8",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]