Vendor
SEOWriting
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.4
SEOWriting WordPress Plugin 1.12.5 Stored XSS via iframe onload
SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by exploiting an overly permissive KSES allowlist that explicitly permits the onload even…