Read the docs

Qr Redirector Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Qr Redirector Project records in CISA KEV

No Qr Redirector Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qr Redirector 2 records LOW

Records

2 records

TI-2021-07136 CVE-2021-24854 · GHSA-656f-6p69-88hh

QR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-11-17 Fixed in 1.6.1 CWE-79
TI-2021-07135 CVE-2021-24853 · GHSA-gg89-hw93-j4hc

QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update

Priority LOW 20

The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscribe…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00447 Published 2021-11-17 Fixed in 1.6 CWE-284
Open these records in search →