Lucene search
+L

7 matches found

OSV
OSV
•added 2021/08/16 7:15 p.m.•21 views

CVE-2021-34641

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the /src/Actions/Api/TitleDescriptionMeta.php file which allows authenticated attackers to inject arbitrary web scripts, in versions 5.0.0 - 5.0.3...

5.4CVSS6.1AI score0.00648EPSS
SaveExploits2References2
Prion
Prion
•added 2021/08/16 7:15 p.m.•23 views

Cross site scripting

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the /src/Actions/Api/TitleDescriptionMeta.php file which allows authenticated attackers to inject arbitrary web scripts, in versions 5.0.0 - 5.0.3...

3.5CVSS5.3AI score0.00648EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2021/08/16 6:47 p.m.•43 views

CVE-2021-34641 SEOPress <= 5.0.0 – 5.0.3 Authenticated Stored Cross-Site Scripting

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the /src/Actions/Api/TitleDescriptionMeta.php file which allows authenticated attackers to inject arbitrary web scripts, in versions 5.0.0 - 5.0.3...

6.4CVSS6.3AI score0.00648EPSS
SaveExploits2References2
CVE
CVE
•added 2021/08/16 6:47 p.m.•81 views

CVE-2021-34641

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions 5.0.0 through 5.0.3 . The root cause is located in the processPut function within the ~/src/Actions/Api/TitleDescriptionMeta.php file, which fails to perform adequate security checks on user input data. T...

6.4CVSS6AI score0.00648EPSS
SaveIn wildExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/16 12:00 a.m.•3 views

PT-2021-20610

Name of the Vulnerable Software and Affected Versions: SEOPress WordPress plugin versions 5.0.0 through 5.0.3 Description: The issue allows authenticated attackers to inject arbitrary web scripts via the processPut function found in the /src/Actions/Api/TitleDescriptionMeta.php file. This enables...

6.4CVSS0.00648EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•6 views

CVE-2021-34641: Improper Neutralization of Input During Web Page Generation

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the /src/Actions/Api/TitleDescriptionMeta.php file which allows authenticated attackers to inject arbitrary web scripts, in versions 5.0.0 - 5.0.3...

6.4CVSS5.8AI score0.00648EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/08/16 12:00 a.m.•18 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

6.4CVSS5.6AI score0.00648EPSS
SaveExploits2References4
Rows per page
Query Builder