CVE-2024-4900: SEOPress < 7.8 - Contributor+ Open Redirect
0.0
CVSS
Description
The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post
Classification
CVE ID: CVE-2024-4900
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Affected Products
Vendor: Unknown
Product: SEOPress
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)