The importFromRedirection AJAX action of the SEO...
High severity
Unreviewed
Published
Nov 17, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Nov 17, 2021
Published to the GitHub Advisory Database
Nov 17, 2021
Last updated
Feb 1, 2023
The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is also installed
References