Aller au contenu
Se connecter
5.0 Moyenne

CVE-2024-4899 The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high…

Description

The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
SEOPress 7.8 premières → < 7.8 7.8
SEOPress 7.8 premières → < 7.8 7.8

Autres CVE de SEOPress

Les 6 CVE de SEOPress →
CVE-2026-108041 SEOPress < 10.4 - Authenticated Stored XSS via Analytics Tracking Settings 7.1 Élevée CVE-2024-5488 The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with… 9.8 Critique CVE-2024-4900 The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow… 6.1 Moyenne CVE-2023-6290 The SEOPress WordPress plugin before 7.3 does not sanitise and escape some of its settings, which could allow high… 4.8 Moyenne
Suivre cette CVE