Seomatic Security Vulnerabilities and Issues — Seomatic CVE List

Lucene search

Nystudio107Seomatic

3 matches found

CVE•added 2022/06/12 11:15 a.m.•106 views

CVE-2021-41749

In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.

9.8CVSS9.8AI score0.85603EPSS

CVE•added 2022/03/11 4:15 p.m.•74 views

CVE-2021-44618

A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header.

9.8CVSS9.5AI score0.00486EPSS

CVE•added 2022/06/12 12:15 p.m.•54 views

CVE-2021-41750

A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName...

6.1CVSS5.9AI score0.00472EPSS