Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-39665 EUVD-2026-20339GHSA-875q-xj6g-48pg

WordPress SEO Friendly Images plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Vladimir Prelovac Product: SEO Friendly Images

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Prelovac SEO Friendly Images seo-image allows DOM-Based XSS.This issue affects SEO Friendly Images: from n/a through <= 3.0.5.

Affected products

VendorProductAffectedFixed
Vladimir Prelovac SEO Friendly Images ≤ 3.0.5 —

References