PT-2026-4462 · Unknown · Delay Redirects

Hhhai · Publicado 2026-01-23 · Atualizado 2026-01-24 · CVE-2026-24632

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Delay Redirects versions through 1.0.0

Description Delay Redirects is susceptible to a DOM-Based Cross-site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution within the context of the user's browser.

Recommendations Update Delay Redirects to a version later than 1.0.0.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-24632

Produtos afetados

Delay Redirects

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24632 · Nota de Segurança
• https://t.me/CVEtracker/42845 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2015086230275232233 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/delay-redirects/vulnerability/wordpress-delay-redirects-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://twitter.com/VulmonFeeds/status/2014732541484261885 · Publicação no Twitter