CVE-2021-24286

CVE-2021-24286 is a reflected Cross-Site Scripting (XSS) vulnerability found in the Redirect 404 to parent WordPress plugin versions prior to 1.3.1. The flaw stems from insufficient sanitization of the "tab" parameter on the plugin's settings page. This vulnerability is rated as Medium severity with a CVSS score of 6.1, indicating it can be exploited remotely with low complexity, requiring user interaction to achieve limited impact on confidentiality and integrity. While not listed in CISA's KEV catalog, public exploit code is available via ExploitDB and Nuclei templates, suggesting a potential for exploitation, though there is no evidence of active exploitation or significant community discussion.