CVE-2024-10515

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

CVE-2024-10515

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

CVE-2024-10515 SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

CVE-2024-10515

CVE-2024-10515 is a Stored XSS flaw in the WordPress plugin “SEO Plugin by Squirrly SEO” affecting versions before 12.3.21. The issue allows an editor to embed malicious scripts, enabling account takeover/backdoor behavior. Underlying evidence (NVD/Red Hat/CIRCL/Patchstack entries) describes the ...

CVE-2024-10515 SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor...

WordPress plugin SEO Plugin by Squirrly SEO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress SEO Plugin by Squirrly SEO Plugin < 12.3.21 is vulnerable to Cross Site Scripting (XSS)

Software SEO Plugin by Squirrly SEO Type Plugin Vulnerable versions 12.3.21 Fixed in 12.3.21 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10515 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 865200521938 Credits Dmitrii...

CVE-2024-43286

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

CVE-2024-43286

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

CVE-2024-43286

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

CVE-2024-43286 WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

CVE-2024-43286

CVE-2024-43286 describes an SQL injection risk in the WordPress plugin Squirrly SEO (WordPress SEO Plugin by Squirrly SEO) up to version 12.3.19 . The vulnerability arises from improper neutralization of specific elements used in SQL commands, allowing an attacker to potentially affect confidenti...

CVE-2024-43286 WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

WordPress plugin SEO Plugin by Squirrly SEO SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin SEO Plugin...

WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin SEO Plugin by Squirrly SEO versions = 12.3.19...

WordPress SEO Plugin by Squirrly SEO Plugin <= 12.3.19 is vulnerable to SQL Injection

Software SEO Plugin by Squirrly SEO Type Plugin Vulnerable versions = 12.3.19 Fixed in 12.3.20 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-43286 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a803fc913cd9 Credits Rafie Muhammad Patchstack Required...

EUVD-2024-47582

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-6497

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-6497

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-6497 SEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url Parameter

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...