CVE-2021-29009 | Severity.io

Description

A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter.

Related CPE's

Vulnerable

References

ExploitThird Party Advisory

ExploitThird Party Advisory

Weaknesses

Primary

CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

4.8 · Medium

Information

Source identifier

Vulnerability status

Modified

Published

2021-03-25T19:15:13.460Z

4 years ago

Last modified

2024-11-21T05:00:31.060Z

1 year ago