Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/10/03 1:56 a.m.23 views

CVE-2025-11241 Yoast SEO Premium 25.7-25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allo...

6.4CVSS0.00303EPSS
SaveExploits0References3
Rows per page
Query Builder