Reflected Cross-Site Scripting in Redirection Plus by Jannat Quality Backlinks
CVE-2025-23681

7.1HIGH

Key Information:

Vendor
WordPress
Status
Redirection Plus
Vendor
CVE Published:
22 January 2025

Summary

The Redirection Plus plugin by Jannat Quality Backlinks is susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking, data theft, and other harmful actions. Users of Redirection Plus from n/a through version 2.0.0 are advised to patch their installations to mitigate this security risk.

Affected Version(s)

REDIRECTION PLUS <= 2.0.0

References

https://patchstack.com/database/wordpress/plugin/redirect...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

João Pedro S Alcântara (Kinorth) (Patchstack Alliance)
.