Filtered by vendor Qr Redirector Project Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24854 1 Qr Redirector Project 1 Qr Redirector 2024-11-21 5.4 Medium
The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.
CVE-2021-24853 1 Qr Redirector Project 1 Qr Redirector 2024-11-21 4.3 Medium
The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect response status code of arbitrary QR Redirects