CVE-2021-24327: Clogica Seo Redirection Plugin

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads

Affected products

• Clogica Seo Redirection Plugin: before 6.4 (fixed in 6.4)

Published 2021-05-17. Last modified 2026-06-17.