3275 matches found
SEO Redirection < 6.4 - Authenticated Reflected Cross-Site Scripting (XSS)
The setting page of the plugin is vulnerable to reflected Cross-Site Scripting XSS as user input is not properly sanitised before being output in an attribute. Timeline WPScanTeam January 29th, 2021 - Report received & Confirmed & Escalated to WordPress plugins Team who confirmed to have received...
Gootloader exploits websites via SEO to spread ransomware, trojans
By Deeba Ahmed Researchers have warned that Gootloader campaigns generally target users in the US, Germany, France, and South Korea. This is a post from HackRead.com Read the original post: Gootloader exploits websites via SEO to spread ransomware, trojans...
Malware Loader Abuses Google SEO to Expand Payload Delivery
The Gootloader malware loader, previously used for distributing the Gootkit malware family, has undergone what researchers call a “renaissance” when it comes to payload delivery. New research released this week paints Gootloader as an increasingly sophisticated loader framework, which has now...
CVE-2021-3258
Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting XSS, which may lead to arbitrary remote code execution...
CVE-2021-3258
Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting XSS, which may lead to arbitrary remote code execution...
Cross site scripting
Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting XSS, which may lead to arbitrary remote code execution...
CVE-2021-3258
Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting XSS, which may lead to arbitrary remote code execution...
CVE-2021-3258
CVE-2021-3258 affects Question2Answer Q2A Ultimate SEO Version 1.3. The connected documents confirm a cross-site scripting (XSS) vulnerability that may lead to arbitrary remote code execution. The issue is described across NVD and Red Hat/NVD and third-party sources as an XSS flaw with potential ...
CVE-2021-3258
Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting XSS, which may lead to arbitrary remote code execution...
SEO Panel 4.6.0 Remote Code Execution
Exploit Title: SEO Panel 4.6.0 - Remote Code Execution 2 Date: 22 Jan 2021 Exploit Author: Kr0ff Vendor Homepage: https://www.seopanel.org/https://www.kentico.com/ Software Link: https://www.seopanel.org/spdownload/4.6.0 Version: 4.6.0 Tested on: Ubuntu 20.04 !/usr/bin/env python3 ''' DESCRIPTION...
Question2Answer Q2A Ultimate SEO Cross-Site Scripting Vulnerability
Q2A Ultimate SEO is a component from the Q2A Projects team that provides search engine optimization functionality for Question2Answer. Question2Answer Q2A Ultimate SEO Version 1.3 suffers from a cross-site scripting vulnerability that leads to arbitrary remote code execution...
SEO Panel 4.6.0 - Remote Code Execution (2)
Exploit Title: SEO Panel 4.6.0 - Remote Code Execution 2 Date: 22 Jan 2021 Exploit Author: Kr0ff Vendor Homepage: https://www.seopanel.org/https://www.kentico.com/ Software Link: https://www.seopanel.org/spdownload/4.6.0 Version: 4.6.0 Tested on: Ubuntu 20.04 !/usr/bin/env python3 ''' DESCRIPTION...
WordPress File Upload Vulnerability (CNVD-2021-29447)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.One SEO Pack is a plugin for WordPress. A security vulnerability exists in One SEO Pack plugin for WordPress versions...
WordPress All in One SEO Pack plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress All in One SEO Pack plugin prior to version...
Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-01541)
SEO Panel is a free, open source SEO optimization software. A stored cross-site scripting vulnerability exists in Seo Panel 4.8.0. An attacker can exploit this vulnerability via the seo/seopanel/websites.php URI to conduct cross-site scripting attacks...
Seo Panel Cross-Site Scripting Vulnerability (CNVD-2021-01543)
SEO Panel is a free, open source SEO optimization software. A reflective cross-site scripting vulnerability exists in Seo Panel 4.8.0. An attacker can exploit this vulnerability via the seo/seopanel/login.php?sec=forgot email parameter to conduct a cross-site scripting attack...
CVE-2021-3002
Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...
CVE-2021-3002
Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...