CVE-2021-25028CWE-601

Event Tickets < 5.2.2 - Open Redirect

published January 24, 2022

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01932 · 79.9th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-01-24T08:01Z
EPSS history
Timeline
  • 24 JAN 08:01Z
    Event Tickets < 5.2.2 - Open Redirect
    cvelistv5