Vulnerabilities

TI-2024-24760 CVE-2024-37245 · GHSA-63w7-g889-pgj2

WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vsourz Digital All In One Redirection allows Reflected XSS.This issue affects All In One Redirection: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-07-22 No fix listed CWE-79

TI-2023-02340 CVE-2023-2493 · GHSA-cwmp-669c-fh3g

All In One Redirection < 2.2.0 - Admin+ SQLi

HIGH 67

The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users suc…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01077 Published 2023-07-10 Fixed in 2.2.0

Vulnerabilities

Filters

WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

All In One Redirection < 2.2.0 - Admin+ SQLi