WordPress Yoast SEO Plugin < 2.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:yoast:yoastseo"; if description...

CVE-2012-6692

Cross-site scripting XSS vulnerability in js/wp-seo-metabox.js in the WordPress SEO by Yoast plugin before 2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the posttitle parameter to wp-admin/post-new.php, which is not properly handled in the snippet preview...

CVE-2012-6692

CVE-2012-6692 affects WordPress SEO by Yoast plugin for WordPress, prior to version 2.2. The XSS exists in the snippet preview functionality via the post_title parameter to wp-admin/post-new.php, due to inadequate handling in js/wp-seo-metabox.js. A remote attacker could inject arbitrary script/H...