CVE-2021-24142

CVE-2021-24142: 301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

Vendor Unknown
Product 301 Redirects - Easy Redirect Manager
Weakness CWE-89 · SQLi
Published March 18, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections.

Key dates

02Disclosure timeline

March 18, 2021 CVE published
August 3, 2024 Record updated