CVE-2021-24847: vulnerability in SEO Redirection Plugin – 301 Redirect Manager
SEO Redirection < 8.2 - Subscriber+ SQL Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.4%
The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is also installed
Affected products
Unknown · SEO Redirection Plugin – 301 Redirect ManagerRelated CVEs — SEO Redirection Plugin – 301 Redirect Manager
In the same product, most dangerous first.