.. / CVE-2021-24288

• Open Redirect
• Nuclei
• Web

Exploit for WordPress AcyMailing <7.5.0 - Open Redirect (CVE-2021-24288)

Description:

WordPress AcyMailing plugin before 7.5.0 contains an open redirect vulnerability due to improper sanitization of the redirect parameter. An attacker turning the request from POST to GET can craft a link containing a potentially malicious landing page and send it to the user.

Nuclei Template

View the template here CVE-2021-24288.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24288.yaml

References: