Description
WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.
Remediation
References
Related Vulnerabilities
WordPress Plugin Quick Page/Post Redirect Security Bypass (5.1.9)
WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Cross-Site Request Forgery (4.4)
Squid Improper Encoding or Escaping of Output Vulnerability (CVE-2021-28662)
Oracle JRE CVE-2013-2440 Vulnerability (CVE-2013-2440)
WordPress Plugin Ajax Contact Form Cross-Site Scripting (1.0)