Description

This script is possibly vulnerable to URL redirection attacks.

URL redirection is sometimes used as a part of phishing attacks that confuse visitors about which web site they are visiting.

Remediation

Your script should properly sanitize user input.

References

Unvalidated Redirects and Forwards Cheat Sheet

HTTP Response Splitting, Web Cache Poisoning Attacks, and Related Topics

Related Vulnerabilities

WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.33)

WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.13)

TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3669)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (3.8.2.2)

WordPress Plugin WP Js External Link Info Open Redirect (1.21)

Severity

Medium

Classification

CWE-601 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Url Redirection