CVE-2021-24142

301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

State: Published
Severity: Not scored
Published: Mar 18, 2021
Updated: Aug 3, 2024
Reserved: Jan 14, 2021

Description

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections.

Scores

The record has no CVSS score.

Weaknesses

CWE-89 SQL Injection

Affected Products

Product	Versions
301 Redirects - Easy Redirect ManagerUnknown	2.51 to before 2.51Affected

References

https://wpscan.com/vulnerability/19800898-d7b6-4edd-887b-dac3c0597f14

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.