Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:qr_redirector:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductQr Redirector (54ad9382-66c0-555d-82c0-e2efc1881afb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24854 vulnerable 2026-06-08 05:30:39.356061 QR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting
The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.
Published: 2021-11-17T10:15:58.000Z
Updated: 2024-08-03T19:42:17.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24853 vulnerable 2026-06-08 05:30:39.355053 QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update
The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect response status code of arbitrary QR Redirects
Published: 2021-11-17T10:15:57.000Z
Updated: 2024-08-03T19:42:17.211Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.