furikake <= 0.1.0 - Open Redirect
mediumWordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('location:'.urldecode($_GET['furikake-redirect']));
- CVSS:
- 6.1
- Affected:
- up to 0.1.0
- Fixed in:
- 0.1.1
- Disclosed:
- Jan 1, 2018