CVE-2024-1134: Improper Neutralization of Input During Web Page Generation

The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SEO title and description parameters as well as others in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for attacker...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

PT-2021-11878

Name of the Vulnerable Software and Affected Versions: All in One SEO Pack plugin versions prior to 3.6.2 Description: The issue is related to unsanitized input in the SEO Description and Title fields, which can lead to stored XSS when a Contributor provides malicious input. Recommendations: For...