Skip to content
OpenAdvisories

Vendor

coleds

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.4

    Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by au…