Unscored CVE-2014-1855 EUVD-2014-1920GHSA-m9x3-pp92-vvhw

Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML…

Published May 20, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) keyword parameter to proxy.php.

References

https://www.htbridge.com/advisory/HTB23200
http://forum.seopanel.in/viewtopic.php?f=7&t=10978
58706 third-party-advisory
20140516 Two Cross-Site Scripting (XSS) Vulnerabilities in Seo Panel mailing-list
http://packetstormsecurity.com/files/126706/Seo-Panel-3.4.0-Cross-Site-Scripting.html