Lucene search
K

8 matches found

VulnCheck KEV
VulnCheck KEV
added 2024/09/19 12:0 a.m.0 views

VulnCheck KEV: CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.8CVSS7.3AI score0.94276EPSS
Exploits1References1
OSV
OSV
added 2022/05/24 5:10 p.m.14 views

GHSA-6Q4J-8PJM-5MGC SEOmatic for CraftCMS allows Server-Side Template Injection

The Seomatic component before 3.2.46 for Craft CMS allows Server-Side Template Injection and information disclosure via malformed data to the metacontainers controller...

9.8CVSS8.4AI score0.94276EPSS
Exploits1References6
Veracode
Veracode
added 2020/03/05 4:28 a.m.23 views

Server-Side Template Injection (SSTI)

nystudio107/craft-seomatic is vulnerable to server-side template injection. Lack of validation and sanitization allows an attacker to inject and execute arbitrary template variables that can lead to code execution via malicious data to the metacontainers controller...

9.8CVSS7.4AI score0.94276EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2020/03/04 5:15 p.m.15 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.8CVSS7.1AI score0.94276EPSS
Exploits1References4
NVD
NVD
added 2020/03/04 5:15 p.m.15 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.8CVSS9.6AI score0.94276EPSS
Exploits1References4
Prion
Prion
added 2020/03/04 5:15 p.m.16 views

Sql injection

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

7.5CVSS9.6AI score0.94276EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2020/03/04 4:3 p.m.15 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller...

9.7AI score0.94276EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2020/03/04 12:0 a.m.70 views

CVE-2020-9757

The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller. Recent assessments: Mad-robot at July 05, 2020 1:31pm UTC reported: Description- The SEOmatic component before 3.3.0 for Craft CMS allows...

9.8CVSS4.3AI score0.94276EPSS
In wildExploits1References5
Rows per page
Query Builder