Lucene search
LnsmileWPEX-ID:7D5F58A8-BEE4-46BE-9C08-D272678338F0HistoryDec 22, 2021 - 12:00 a.m.
Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
2021-12-2200:00:00
lnsmile
79
smart seo tool
cross-site scripting
tdk optimization
3.0.6
exploit
EPSS
0.001
Percentile
31.7%
The plugin does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting
With the "TDK optimization" setting enabled (7th page, first one): https://example.com/?s=123456"><sCrIpT>alert(/XSS/)</ScRiPt>Related
patchstack
patchstack
nvd
nvd
CVE-2021-24976
2022-01-24 08:15:09
wpvulndb
wpvulndb
Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
2021-12-22 00:00:00
cvelist
cvelist
CVE-2021-24976 Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
2022-01-24 08:01:02
prion
prion
Cross site scripting
2022-01-24 08:15:00
cve
cve
CVE-2021-24976
2022-01-24 08:15:09
cnvd
cnvd
WordPress Smart SEO Tool plugin cross-site scripting vulnerability
2022-01-26 00:00:00