CVE-2021-24976 Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting

2022-01-2408:01:02

CWE-79

WPScan

www.cve.org

smart seo tool

wordpress

plugin

vulnerability

reflected cross-site scripting

EPSS

0.001

Percentile

31.7%

JSON

The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting

CNA Affected

[
  {
    "product": "Smart SEO Tool – SEO优化插件",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.0.6",
        "status": "affected",
        "version": "3.0.6",
        "versionType": "custom"
      }
    ]
  }
]