CVE-2024-0597 SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 12.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2024-0597 SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 12.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2024-0597

CVE-2024-0597 concerns the WordPress plugin SEO Plugin by Squirrly SEO. It enables a stored cross-site scripting (XSS) attack via administrator settings in versions up to 12.3.15, requiring an administrative (or higher) privilege and affecting multisite deployments or sites where unfiltered_html ...

WordPress SEO Plugin by Squirrly SEO Plugin <= 12.3.15 is vulnerable to Cross Site Scripting (XSS)

Software SEO Plugin by Squirrly SEO Type Plugin Vulnerable versions = 12.3.15 Fixed in 12.3.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0597 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 936a9441c323 Credits Akbar...