Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 8:53 a.m.11 views

CVE-2024-3368

The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6.1CVSS5.9AI score0.00369EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/05/20 6:0 a.m.15 views

CVE-2024-3368 All in One SEO < 4.6.1.1 - Contributor+ Stored XSS

The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.9AI score0.00369EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/05/20 6:0 a.m.36 views

CVE-2024-3368 All in One SEO < 4.6.1.1 - Contributor+ Stored XSS

The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

8.1AI score0.00369EPSS
SaveExploits2References1
Rows per page
Query Builder