Lucene search
Krzysztof ZającWPEX-ID:80B0682E-2C3B-441B-9628-6462368E5FC7HistoryDec 22, 2021 - 12:00 a.m.
Event Tickets < 5.2.2 - Open Redirect
2021-12-2200:00:00
Krzysztof Zając
56
0.001 Low
EPSS
Percentile
43.6%
The plugin does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue
https://exampel.com/wp-admin/admin.php?page=wp_ajax_rsvp-form&tribe_tickets_redirect_to=https://wpscan.comRelated
cve
cve
CVE-2021-25028
2022-01-24 08:15:09
nuclei
nuclei
WordPress Event Tickets < 5.2.2 - Open Redirect
2022-02-12 16:47:01
nvd
nvd
CVE-2021-25028
2022-01-24 08:15:09
patchstack
patchstack
WordPress Event Tickets plugin <= 5.2.1 - Open Redirect vulnerability
2021-12-22 00:00:00
prion
prion
Crlf injection
2022-01-24 08:15:00
wpvulndb
wpvulndb
Event Tickets < 5.2.2 - Open Redirect
2021-12-22 00:00:00
cvelist
cvelist
CVE-2021-25028 Event Tickets < 5.2.2 - Open Redirect
2022-01-24 08:01:12