CVE-2021-24358: fallo en The Plus Addons for Elementor Page Builder
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 2.3%
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redirect issue.
Productos afectados
Unknown · The Plus Addons for Elementor Page BuilderCVEs relacionadas — The Plus Addons for Elementor Page Builder
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-24175—The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication BypassEPSS 17.2%CVE-2021-24351—The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)EPSS 2.5%CVE-2021-24359—The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email SendingEPSS 1.1%