Lucene search
+L

8 matches found

VulnCheck KEV
VulnCheck KEV
added 2024/09/19 12:0 a.m.4 views

VulnCheck KEV: CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.8CVSS7.3AI score0.73434EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/24 5:10 p.m.69 views

GHSA-6Q4J-8PJM-5MGC SEOmatic for CraftCMS allows Server-Side Template Injection

The Seomatic component before 3.2.46 for Craft CMS allows Server-Side Template Injection and information disclosure via malformed data to the metacontainers controller...

9.8CVSS8.4AI score0.73434EPSS
SaveExploits1References6
Veracode
Veracode
added 2020/03/05 4:28 a.m.27 views

Server-Side Template Injection (SSTI)

nystudio107/craft-seomatic is vulnerable to server-side template injection. Lack of validation and sanitization allows an attacker to inject and execute arbitrary template variables that can lead to code execution via malicious data to the metacontainers controller...

9.8CVSS7.4AI score0.73434EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2020/03/04 5:15 p.m.36 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.8CVSS9.6AI score0.73434EPSS
SaveExploits1References4
OSV
OSV
added 2020/03/04 5:15 p.m.31 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.8CVSS7.1AI score
SaveExploits0References4
Prion
Prion
added 2020/03/04 5:15 p.m.23 views

Sql injection

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

7.5CVSS9.6AI score0.73434EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/03/04 5:15 p.m.75 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.8CVSS7.7AI score0.73434EPSS
SaveIn wildExploits1References6
Cvelist
Cvelist
added 2020/03/04 4:3 p.m.36 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.7AI score0.73434EPSS
SaveExploits1References4
Rows per page
Query Builder