Description (CNA)
The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Smart SEO Tool – SEO优化插件 | affected 3.0.6 before 3.0.6 |
CWE
CWE-79
References
- https://wpscan.com/vulnerability/7d5f58a8-bee4-46be-9c08-d272678338f0
- https://plugins.trac.wordpress.org/changeset/2637305
ADP enrichment
No English description supplied.