CVE-2021-24326

5.4 mediumEPSS 0.6%

Medium (5.4) in clogica all 404 redirect to homepage. EPSS 0.6% chance of exploitation in the next 30 days.

The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitised before being output in an attribute.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-05-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

clogica:all_404_redirect_to_homepage

References

https://wpscan.com/vulnerability/63d6ca03-e0df-40db-9839-531c13619094
https://wpscan.com/vulnerability/63d6ca03-e0df-40db-9839-531c13619094

Check your stack JSON