WordPress SEOPress Plugin 5.0.x < 5.0.4 XSS Vulnerability

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2021-34641

creationtimestamp| type| source ---|---|--- 2021-08-16 22:15:01+00:00| seen| https://t.me/cibsecurity/27403...

CVE-2021-34641

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions 5.0.0 through 5.0.3 . The root cause is located in the processPut function within the ~/src/Actions/Api/TitleDescriptionMeta.php file, which fails to perform adequate security checks on user input data. T...