Server Side Template Injection (SSTI)

nystudio107/seomatic is vulnerable to server side template injection SSTI. The vulnerability is possible through sending requests that don't match any elements, leading to the generation of incorrect canonicalUrl , and execution of Twig code...

CVE-2018-14716

A Server Side Template Injection SSTI was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code...

Code injection

A Server Side Template Injection SSTI was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code...

CVE-2018-14716

A Server Side Template Injection SSTI was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code...

PT-2018-12683

Name of the Vulnerable Software and Affected Versions Craft CMS SEOmatic plugin versions prior to 3.1.4 Description A Server Side Template Injection SSTI issue was found, where requests that do not match any elements incorrectly generate the canonicalUrl. This can lead to the execution of Twig...

CVE-2018-14716: Improper Control of Generation of Code

A Server Side Template Injection SSTI was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code...