Skip to content
OpenAdvisories

Vendor

SEOWriting

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.4

    SEOWriting WordPress Plugin 1.12.5 Stored XSS via iframe onload

    SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by exploiting an overly permissive KSES allowlist that explicitly permits the onload even…