Seo Panel@4.8.0 Security Vulnerabilities and Issues — Seo Panel@4.8.0 CVE List

Lucene search

SeopanelSeo Panel4.8.0

10 matches found

CVE•added 2021/03/25 8:15 p.m.•169 views

CVE-2021-29009

A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter.

4.8CVSS4.9AI score0.00184EPSS

CVE•added 2021/03/18 12:15 p.m.•78 views

CVE-2021-28417

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.

4.8CVSS4.8AI score0.00213EPSS

CVE•added 2021/03/18 12:15 p.m.•78 views

CVE-2021-28418

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.

4.8CVSS4.8AI score0.00213EPSS

CVE•added 2021/03/18 12:15 p.m.•75 views

CVE-2021-28420

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.

4.8CVSS4.8AI score0.00208EPSS

CVE•added 2021/03/18 12:15 p.m.•71 views

CVE-2021-28419

The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.

7.2CVSS7AI score0.0923EPSS

CVE•added 2021/01/01 7:15 p.m.•71 views

CVE-2021-3002

Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter.

6.1CVSS5.9AI score0.22726EPSS

CVE•added 2020/12/31 8:15 p.m.•61 views

CVE-2020-35930

Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.

5.4CVSS5.2AI score0.0039EPSS

CVE•added 2021/03/25 8:15 p.m.•42 views

CVE-2021-29008

A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "to_time" parameter.

4.8CVSS4.9AI score0.00176EPSS

CVE•added 2021/11/05 4:15 p.m.•37 views

CVE-2021-39413

Multiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed.php, (f) rank.php, (g) review.php, (h) saturationchecker.php, (i) social_media.php, and (j) reports.php; ...

6.1CVSS6.2AI score0.0023EPSS

CVE•added 2021/03/25 8:15 p.m.•35 views

CVE-2021-29010

A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter.

4.8CVSS4.9AI score0.00184EPSS