title: Event Tickets < 5.2.2 - Open Redirect
description: The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
product: Event Tickets
vendor: Unknown
versions:
lessThan: 5.2.2, status: affected, version: 5.2.2, versionType: custom
}