CVE-2021-24324

Name of the Vulnerable Software and Affected Versions 404 SEO Redirection WordPress plugin versions 1.3 and earlier

Description The issue is related to the lack of CSRF checks in all settings of the plugin, allowing attackers to make a logged-in user change the plugin's settings. Additionally, due to the lack of sanitization and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues.

Recommendations For versions 1.3 and earlier, update to a version that includes CSRF checks and proper sanitization and escaping of fields to prevent Stored Cross-Site Scripting issues. As a temporary workaround, consider restricting access to the plugin's settings to minimize the risk of exploitation.