Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24976

Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting

Description

The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Smart SEO Tool – SEO优化插件

  • 3.0.6 to < 3.0.6affected

References