PT-2022-13371

Name of the Vulnerable Software and Affected Versions SEO 301 Meta WordPress plugin versions 1.9.1 and earlier Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks by exploiting unescaped Request and Destination settings in the plugin, even wh...

CVE-2022-0701: Improper Neutralization of Input During Web Page Generation

The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

SEO 301 Meta <= 1.9.1 - Admin+ Stored Cross-Site Scripting

The plugin does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Put the following payload in the Request or Destination settings of the plugin: "...