Cross site scripting

2020-02-1118:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.

CPENameOperatorVersion
all_in_one_seo_packge2.0
all_in_one_seo_packlt2.0.3.1
all_in_one_seo_packge1.3.6.4
all_in_one_seo_packle1.6.15.2

Name	Operator	Version
all_in_one_seo_pack	ge	2.0
all_in_one_seo_pack	lt	2.0.3.1
all_in_one_seo_pack	ge	1.3.6.4
all_in_one_seo_pack	le	1.6.15.2

References

packetstormsecurity.com/files/cve/CVE-2013-5988

www.securityfocus.com/archive/1/528962