title: SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)
description: The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: SEO Redirection Plugin – 301 Redirect Manager
vendor: Unknown
versions:
lessThan: 6.4, status: affected, version: 6.4, versionType: custom
}