Lucene search
LnsmileWPVDB-ID:7D5F58A8-BEE4-46BE-9C08-D272678338F0HistoryDec 22, 2021 - 12:00 a.m.
Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
2021-12-2200:00:00
lnsmile
wpscan.com
14
cross-site scripting
plugin vulnerability
search parameter sanitization
EPSS
0.001
Percentile
31.7%
The plugin does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting
PoC
With the “TDK optimization” setting enabled (7th page, first one): https://example.com/?s=123456">
Related
patchstack
patchstack
nvd
nvd
CVE-2021-24976
2022-01-24 08:15:09
cve
cve
CVE-2021-24976
2022-01-24 08:15:09
prion
prion
Cross site scripting
2022-01-24 08:15:00
cvelist
cvelist
CVE-2021-24976 Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
2022-01-24 08:01:02
cnvd
cnvd
WordPress Smart SEO Tool plugin cross-site scripting vulnerability
2022-01-26 00:00:00
wpexploit
wpexploit
Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
2021-12-22 00:00:00