Medium (6.1) in mooveagency redirect 404 to parent. EPSS 13% chance of exploitation in the next 30 days.
The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue
Severity
CVSS 3.1
6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)