CVE-2020-35930

2020-12-3120:15:12

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.

CPENameOperatorVersion
seo-paneleq4.4.0
seo-paneleq4.3.0
seo-paneleq4.5.0
seo-paneleq4.6.0
seo-paneleq4.7.0
seo-paneleq4.8.0
seo-paneleq4.2.0

Name	Operator	Version
seo-panel	eq	4.4.0
seo-panel	eq	4.3.0
seo-panel	eq	4.5.0
seo-panel	eq	4.6.0
seo-panel	eq	4.7.0
seo-panel	eq	4.8.0
seo-panel	eq	4.2.0

References

github.com/seopanel/Seo-Panel/issues/201