Lucene search
Veracode Vulnerability DatabaseVERACODE:35950HistoryJun 13, 2022 - 4:29 a.m.
Server-Side Template Injection
2022-06-1304:29:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.382 Low
EPSS
Percentile
97.3%
nystudio107/craft-seomatic is vulnerable to server-side template injection. The vulnerability exists due to the lack of sanitization used for the url parameter in the safeCanonicalUrl function of Helper.php, allowing an attacker to inject and execute malicious code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nystudio107/craft-seomatic | le | 3.4.10 | |
| nystudio107/craft-seomatic | le | 3.4.10 |
Related
osv
osv
Code Injection in SEOmatic
2022-06-13 00:00:19
CVE-2021-41749
2022-06-12 11:15:07
nvd
nvd
CVE-2021-41749
2022-06-12 11:15:07
cve
cve
CVE-2021-41749
2022-06-12 11:15:07
prion
prion
Remote code execution
2022-06-12 11:15:00
nuclei
nuclei
CraftCMS SEOmatic - Server-Side Template Injection
2023-10-12 10:53:59
cvelist
cvelist
CVE-2021-41749
2022-06-12 11:00:13
github
github
Code Injection in SEOmatic
2022-06-13 00:00:19