CVE-2021-24326

CVE-2021-24326: All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)

Vendor Unknown
Product All 404 Redirect to Homepage
Weakness CWE-79 · XSS
Published May 17, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitised before being output in an attribute.

Key dates

02Disclosure timeline

May 17, 2021 CVE published
August 3, 2024 Record updated