Description
WordPress Plugin WP Symposium is prone to an open redirect vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress Plugin WP Symposium version 13.04 is vulnerable; prior versions may also be affected.
Remediation
Update to the latest version
References
Related Vulnerabilities
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (6.4.1)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0185)
WordPress Plugin Catch Gallery Security Bypass (1.6.8)
Oracle Application Server Other Vulnerability (CVE-2002-0560)
WordPress Plugin Multi Plugin Installer Arbitrary File Disclosure (1.1.0)