CVE-2021-3258

Description

Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://nirmaldahal.com.np/sxss-to-defacement-and-account-takeover/ ↗
• https://www.question2answer.org/qa/58520/important-q2a-ultimate-seo-important-update ↗
• https://github.com/q2a-projects/Q2A-Ultimate-SEO/commit/20069f28147c6f2c3acca4e3f6f5154537c5d536 ↗