CVE-2021-24153

2021-04-0519:15:14

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.

CPENameOperatorVersion
wordpress-seoeq1.6.3
wordpress-seoeq1.8-beta
wordpress-seoeq1.5.2.1
wordpress-seoeq1.5.2.8
wordpress-seoeq1.7
wordpress-seoeq3.0.1
wordpress-seoeq3.3.1
wordpress-seoeq1.5.5.1
wordpress-seoeq1.5.0
wordpress-seoeq1.6.2

Name	Operator	Version
wordpress-seo	eq	1.6.3
wordpress-seo	eq	1.8-beta
wordpress-seo	eq	1.5.2.1
wordpress-seo	eq	1.5.2.8
wordpress-seo	eq	1.7
wordpress-seo	eq	3.0.1
wordpress-seo	eq	3.3.1
wordpress-seo	eq	1.5.5.1
wordpress-seo	eq	1.5.0
wordpress-seo	eq	1.6.2