CVE Database /
CVE-2021-24326
CVE · Medium
CVE-2021-24326 — All 404 Redirect to Homepage [all-404-redirect-to-homepage] < 1.21
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24326
|
All 404 Redirect to Homepage [all-404-redirect-to-homepage] < 1.21 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 1.21
|
1.21 |
2021-04-16 |
—
|
CVE-2021-24326
The All 404 Redirect to Homepage plugin before version 1.21 contains an authenticated reflected cross-site scripting vulnerability in its settings page where the tab parameter fails to properly sanitize user-supplied data before displaying it in an HTML attribute. An authenticated attacker could exploit this flaw by injecting malicious scripts through the unsanitized parameter. The vulnerability affects all versions prior to 1.21 and is resolved in version 1.21 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings