Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Qr Redirector Project Component: Qr Redirector Clear all filters
TI-2021-07136 CVE-2021-24854 · GHSA-656f-6p69-88hh

QR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-11-17 Fixed in 1.6.1 CWE-79
TI-2021-07135 CVE-2021-24853 · GHSA-gg89-hw93-j4hc

QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update

Priority LOW 20

The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscribe…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00447 Published 2021-11-17 Fixed in 1.6 CWE-284