CVE-2021-25028

CVE-2021-25028: Event Tickets < 5.2.2 - Open Redirect

Vendor Unknown
Product Event Tickets
Weakness CWE-601 · Open redirect
Published January 24, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue

Key dates

02Disclosure timeline

January 24, 2022 CVE published
August 3, 2024 Record updated