CVE-2021-24327

The SEO Redirection Plugin – 301 Redirect Manager contained a cross-site scripting vulnerability in versions prior to 6.4 where the Redirect From and Redirect To input fields failed to properly sanitize user input when administrators created new redirects through the dashboard. This flaw enabled elevated-privilege users to inject malicious scripts into these fields, bypassing the unfiltered_html restriction. The vulnerability allowed attackers with administrative access to execute arbitrary JavaScript in the WordPress environment.

Based on public CVE data (MITRE/NVD).