CVE-2021-24358CWE-601

The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect

published June 14, 2021

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redirect issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02295 · 83.1th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2021-06-14T13:37Z
EPSS history
Timeline
  • 14 JUN 13:37Z
    The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
    cvelistv5