Description
WordPress Plugin GdeSlon Affiliate Shop is prone to an open redirect vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress Plugin GdeSlon Affiliate Shop version 2.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.1 or latest
References
Related Vulnerabilities
WordPress Plugin AdRotate-Ad manager & AdSense Ads 'adrotate-out.php' SQL Injection (3.6.6)
Apache Traffic Server Out-of-bounds Write Vulnerability (CVE-2021-35474)
Oracle Database Server CVE-2013-5853 Vulnerability (CVE-2013-5853)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4522)