Description
Cross-Site Request Forgery (CSRF) vulnerability in zmseo ZMSEO zmseo allows Stored XSS.This issue affects ZMSEO: from n/a through <= 1.14.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zmseo | ZMSEO | ≤ 1.14.1 | — |
High · 7.1
CVE-2025-25126
EUVD-2025-4045GHSA-rfmv-p53p-68jj
WordPress ZMSEO plugin <= 1.14.1 - CSRF to Stored XSS vulnerability
Published Feb 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack