Orta CVSS 4.7
CVE-2026-111031: CVE-2026-111031: açık yönlendirme
Açıklama (NVD)
The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect users to arbitrary external websites.
Özet bilgiler
- CVSS v3.1
- 4.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N - EPSS
- %0,24 (yüzdelik 15)
- CWE
- CWE-601
- Yama
- Yok / bilinmiyor