CVE-2021-24847

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is also installed

Score

CVSS 3.1 8.8 High

Status

Modified - contact@wpscan.com

Published

2021-11-17

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Seo Redirection Plugin 301 Redirect Manager (Unknown)
• Seo Redirection-301 Redirect Manager (Wp-buy)

References

• https://wpscan.com/vulnerability/679ca6ed-2343-43f3-9c3e-2c12e12407c1