CVE-2015-5461

Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

6.28% chance of exploitation in the next 30 days, 93th percentile

Nuclei

medium

Published

2015-07-08

Updated

2024-08-06

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5461.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2015-5460
• CVE-2015-5465
• CVE-2015-5454
• CVE-2015-5466
• CVE-2015-5453
• CVE-2015-5468