Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24153

Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)

Description

A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Yoast SEO

  • 3.4.1 to < 3.4.1affected

References