Skip to content
Sign in
Not rated

CVE-2021-24153 A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had…

Description

A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.

Affected products and versions

Product Affected versions Fixed in
Yoast SEO 3.4 earliest → < 3.4.1 3.4.1

Other CVEs of Yoast SEO

The 2 CVEs of Yoast SEO →
CVE-2021-25118 The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in… Not rated
Track this CVE