What is CVE-2021-24286?

CVE-2021-24286 is a vulnerability in Moove Agency Redirect 404 To Parent, classified under Cross-site Scripting. Published 2021-05-14.

Is CVE-2021-24286 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Moove Agency Redirect 404 To Parent

CVE-2021-24286

The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.523 (98.0th percentile) — read the EPSS interpretation.

Affected products

Moove Agency Redirect 404 To Parent — versions 1.3.1

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

wpscan.com/vulnerability/b9a535f3-cb0b-46fe-b345-da3462584e27 (x_refsource_CONFIRM)
packetstormsecurity.com/files/164328/WordPress-Redirect-404-To-Parent-1.3.0-Cro… (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-24286?: CVE-2021-24286 is a vulnerability in Moove Agency Redirect 404 To Parent, classified under Cross-site Scripting. Published 2021-05-14.
Is CVE-2021-24286 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.