CVE-2011-4562

The Redirection plugin versions before 2.2.10 contain multiple cross-site scripting vulnerabilities in its admin log viewing pages that allow attackers to inject malicious scripts or HTML through the HTTP Referer header when accessing requests for non-existent posts. The affected files are view/admin/log_item.php and view/admin/log_item_details.php, which fail to properly sanitize the Referer header before displaying it to administrators. An attacker could exploit this to execute arbitrary JavaScript in the context of an admin user's session.

Based on public CVE data (MITRE/NVD).