CVE-2015-5461 StageShow < 5.0.9 - Open Redirect
MediumCVSS 6.4
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stageshow project stageshow | <= 5.08 | No fix listed |
| wordpress stageshow(WordPress) | < 5.0.9 | 5.0.9 |
References
- packetstormsecurity.com exploit
- 20150705 Open redirect vulnerability in StageShow Wordpress plugin v5.0.8 exploit mailing-list
- 75552 vdb-entry
- plugins.trac.wordpress.org
- wordpress.org patch
- wpvulndb.com
- Wordfence Intelligence third-party-advisory
- www.cve.org