Lucene search
PRIOn knowledge basePRION:CVE-2021-41750HistoryJun 12, 2022 - 12:15 p.m.
Cross site scripting
2022-06-1212:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
42.2%
A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName parameter containing an arbitrary filename with the intended content-type to be rendered in the user’s browser as the extension.
Related
osv
osv
CVE-2021-41750
2022-06-12 12:15:07
Cross-site Scripting in SEOmatic plugin
2022-06-13 00:00:19
nvd
nvd
CVE-2021-41750
2022-06-12 12:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-06-13 04:13:10
cvelist
cvelist
CVE-2021-41750
2022-06-12 11:29:00
github
github
Cross-site Scripting in SEOmatic plugin
2022-06-13 00:00:19
cve
cve
CVE-2021-41750
2022-06-12 12:15:07