PT-2025-22372

Name of the Vulnerable Software and Affected Versions cs seo extension versions prior to 9.2.1 Description The issue concerns a cross-site scripting XSS vulnerability. It allows backend users to execute arbitrary scripts via the JSON-LD output. Recommendations For versions prior to 9.2.1, update ...

WordPress MainWP WordPress SEO Extension Plugin <= 4.0.1 is vulnerable to Broken Access Control

Software MainWP WordPress SEO Extension Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23746 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID eb8b01abda06 Credits Dave Jon...

CVE-2013-4871

Cross-site request forgery CSRF vulnerability in the TEQneers SEO Enhancements tqseo extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...