Lucene search
Krzysztof ZającWPVDB-ID:80B0682E-2C3B-441B-9628-6462368E5FC7HistoryDec 22, 2021 - 12:00 a.m.
Event Tickets < 5.2.2 - Open Redirect
2021-12-2200:00:00
Krzysztof Zając
wpscan.com
7
event tickets
open redirect
arbitrary redirect
vulnerability
security issue
EPSS
0.001
Percentile
45.1%
The plugin does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue
PoC
Related
nuclei
nuclei
WordPress Event Tickets < 5.2.2 - Open Redirect
2022-02-12 16:47:01
nvd
nvd
CVE-2021-25028
2022-01-24 08:15:09
cve
cve
CVE-2021-25028
2022-01-24 08:15:09
cvelist
cvelist
CVE-2021-25028 Event Tickets < 5.2.2 - Open Redirect
2022-01-24 08:01:12
wpexploit
wpexploit
Event Tickets < 5.2.2 - Open Redirect
2021-12-22 00:00:00
patchstack
patchstack
WordPress Event Tickets plugin <= 5.2.1 - Open Redirect vulnerability
2021-12-22 00:00:00
prion
prion
Crlf injection
2022-01-24 08:15:00