2 matches found
CVE-2021-24976: Improper Neutralization of Input During Web Page Generation
The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting...
6.1CVSS5.8AI score0.00917EPSS
SaveExploits2References2
PT-2022-9542
Name of the Vulnerable Software and Affected Versions Smart SEO Tool WordPress plugin versions prior to 3.0.6 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs when the TDK optimisation setting is enabled and the search parameter is not properly sanitised and...
6.1CVSS0.00917EPSS
SaveExploits2References4
20