Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:26 a.m.4 views

CVE-2024-12126

The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘googleerror’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

6.1CVSS6.4AI score0.01268EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:27 p.m.5 views

CVE-2020-18165

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...

4.8CVSS6.9AI score0.00379EPSS
Exploits1
Patchstack
Patchstack
added 2025/01/07 7:9 a.m.2 views

WordPress SEO Keywords plugin <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter vulnerability

Reflected Cross-Site Scripting via googleerror Parameter vulnerability discovered by vgo0 in WordPress Plugin seo-keywords versions = 1.1.3...

6.1CVSS6.3AI score0.01268EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/07 4:21 a.m.11 views

CVE-2024-12126 SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter

The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘googleerror’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

6.1CVSS0.01268EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/07 4:21 a.m.5 views

CVE-2024-12126 SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter

The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘googleerror’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

6.1CVSS6AI score0.01268EPSS
Exploits0References2
CVE
CVE
added 2025/01/07 4:21 a.m.38 views

CVE-2024-12126

CVE-2024-12126 affects the WordPress plugin SEO Keywords. It enables a reflected Cross-Site Scripting (XSS) through the google_error parameter in all versions up to 1.1.3 due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary scripts ...

6.1CVSS6AI score0.01268EPSS
Exploits0References2
OSV
OSV
added 2021/05/12 6:15 p.m.1 views

CVE-2020-18165

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...

4.8CVSS6.2AI score0.00379EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/05/12 5:34 p.m.11 views

CVE-2020-18165

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...

5.5AI score0.00379EPSS
Exploits1References1
Rows per page
Query Builder