CVE-2021-24976CWE-79

CVE-2021-24976: vulnerability in Smart SEO Tool – SEO优化插件

Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting

Published · Updated

Follow this CVE+ Monitor Smart SEO Tool – SEO优化插件

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting
Affected products
Unknown · Smart SEO Tool – SEO优化插件