Description
Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_passthrough.php.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Improper Authentication Vulnerability (CVE-2018-1312)
Drupal Core 5.x Multiple Cross-Site Scripting Vulnerabilities (5.0 - 5.1)
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (4.2.1)
MySQL CVE-2013-2395 Vulnerability (CVE-2013-2395)
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2021-23841)