Lucene search

All in One SEO Pack < 3.6.2 - Authenticated Stored Cross-Site Scripting

🗓️ 16 Jul 2020 00:00:00Reported by Chloe ChamberlandType

All in One SEO Pack < 3.6.2 - Authenticated Stored Cross-Site Scripting flaw in WordPress allows contributor+ users to inject malicious scripts in 'all posts' page

Reporter	Title	Published	Views	Family All 7
Patchstack	WordPress All In One SEO Pack plugin <= 3.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	16 Jul 202000:00	–	patchstack
wpexploit	All in One SEO Pack < 3.6.2 - Authenticated Stored Cross-Site Scripting	16 Jul 202000:00	–	wpexploit
NVD	CVE-2020-35946	1 Jan 202104:15	–	nvd
OpenVAS	WordPress All in One SEO Pack Plugin < 3.6.2 XSS Vulnerability	4 Aug 202000:00	–	openvas
CVE	CVE-2020-35946	1 Jan 202104:15	–	cve
Prion	Cross site scripting	1 Jan 202104:15	–	prion
Cvelist	CVE-2020-35946	1 Jan 202103:28	–	cvelist

Vulners

Node

semperfiwebdesign all_in_one_seo_packRange<3.6.2wordpress

Source	Link
wordfence	www.wordfence.com/blog/2020/07/2-million-users-affected-by-vulnerability-in-all-in-one-seo-pack/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jul 2020 00:00Current

0.9Low risk

Vulners AI Score0.9

EPSS0.001