.. / CVE-2021-24406

• Open Redirect
• Nuclei
• Web

Exploit for WordPress wpForo Forum < 1.9.7 - Open Redirect (CVE-2021-24406)

Description:

WordPress wpForo Forum < 1.9.7 is susceptible to an open redirect vulnerability because the plugin did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login.

Nuclei Template

View the template here CVE-2021-24406.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-24406.yaml

References: