VULNERABILITY INTELLIGENCE

CVE-2024-4900

CVSS score6.1 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2024-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post

Weakness classification

  • nvd@nist.gov: CWE-601

Primary references