Skip to content
Sign in
6.4 Medium

CVE-2024-4335 The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…

Description

The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and including, 1.0.217 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affected products and versions

Product Affected versions Fixed in
Rank Math SEO with AI Best SEO Tools 1.0 earliest → 1.0.217 No fix stated
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings 1.0 earliest → 1.0.217 No fix stated

Other CVEs of Rank Math SEO with AI Best SEO Tools

The 3 CVEs of Rank Math SEO with AI Best SEO Tools →
CVE-2024-4617 The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium CVE-2024-3665 The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium
Track this CVE