Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2024-10515

SEO Plugin by Squirrly SEO < 12.3.21 - Editor+ Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown SEO Plugin by Squirrly SEO

Default version status: unaffected

  • 0 to < 12.3.21affected

References