CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress allows Phishing.This issue affects Podlove Podcast Publisher: from n/a through <= 4.2.5.
Explanation of Vulnerability in Simple Terms
Podlove Podcast Publisher versions 4.2.5 and earlier contain an open redirect vulnerability. When a user clicks a malicious link, the plugin redirects them to an attacker-controlled website. The attacker cannot access the site directly but relies on social engineering to trick users into clicking. This can be used for phishing or credential theft.
What an attacker can do
Redirect users to a malicious website when they click a crafted link.
Potential impact on your site
Users may be phished or have credentials stolen if redirected to fake login pages.
Conditions required to exploit
User must click an attacker-supplied link pointing to the vulnerable site.
Key dates
External resources
