CVE-2011-4562 Redirection <= 2.2.9 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| john godley redirection plugin | = 2.2.9 | No fix listed |
| wordpress redirection(WordPress) | < 2.2.10 | 2.2.10 |
References
- dotxed.net url-repurposed
- 76092 vdb-entry
- packetstormsecurity.org exploit
- plugins.trac.wordpress.org
- 46310 third-party-advisory vendor-advisory
- wordpress.org
- 49985 vdb-entry
- wpredirection-referer-header-xss(70373) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org