Event Tickets and Registration, CVE-2021-25028

CVE, Research URL: CVE-2021-25028
Home page URL: Security reports for Event Tickets and Registration
Application: Event Tickets and Registration
Published on: Jan 24, 2022
Research Description: The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue
Affected versions: max 5.3.0.1.
Status: vulnerable