Description

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.

Remediation

References

CVE-2007-1599

Related Vulnerabilities

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-12525)

CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)

MySQL Other Vulnerability (CVE-2016-0705)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25476)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9188)

Severity

Medium

Classification

CVE-2007-1599

Tags

Missing Update Known Vulnerabilities