Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-34641
HistoryAug 16, 2021 - 7:15 p.m.

Cross site scripting

2021-08-1619:15:00
PRIOn knowledge base
www.prio-n.com
1

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the ~/src/Actions/Api/TitleDescriptionMeta.php file which allows authenticated attackers to inject arbitrary web scripts, in versions 5.0.0 - 5.0.3.

CPENameOperatorVersion
seopressge5.0.0
seopresslt5.0.4

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%