Critical · 9.8 CVE-2021-44618 EUVD-2022-1466GHSA-m3xv-x3ph-mq22

Server-side Template Injection in nystudio107/craft-seomatic

Published Mar 11, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header.

Ecosystem	Package	Affected	Fixed	Record
Packagist	nystudio107/craft-seomatic	< 3.4.12	3.4.12	GHSA-m3xv-x3ph-mq22