Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/22 3:26 a.m.50 views

CVE-2026-3427 Yoast SEO <= 27.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'jsonText' Block Attribute

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the jsonText block attribute in all versions up to, and including, 27.1.1 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS0.00193EPSS
SaveExploits0References5
Rows per page
Query Builder