CVE-2021-25102

The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redirect as well as Cross-Site Scripting issue. Exploitation of this issue requires the Login Page URL value to be known, which should be hard to guess, reducing the risk

• CVE ID
• CVE-2021-25102

• Assigner
• contact@wpscan.com

• Vulnerability Status
• Analyzed

• Published Version
• 2022-05-02T16:15:08

• Last Modified Date
• 2022-05-10T13:14:58

• Version
• 2.0

• Vector String
• AV:N/AC:H/Au:N/C:N/I:P/A:N

• Access Vector
• NETWORK

• Access Compatibility
• HIGH

• Authentication
• NONE

• Confidentiality Impact
• NONE

• Integrity Impact
• PARTIAL

• Availability Impact
• NONE

• Base Score
• 2.6

• Severity
• LOW

• Exploitability Score
• 4.9

• Impact Score
• 2.9

• Version
• 3.1

• Vector String
• CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

• Attack Vector
• NETWORK

• Attack Compatibility
• HIGH

• Privileges Required
• NONE

• User Interaction
• REQUIRED

• Scope
• CHANGED

• Confidentiality Impact
• LOW

• Availability Impact
• NONE

• Base Score
• 4.7

• Base Severity
• MEDIUM

• Exploitability Score
• 1.6

• Impact Score
• 2.7