TI-2021-13646 CVE-2021-34632 · GHSA-4rh7-4h26-629jSEO Backlinks <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site ScriptingPriority LOW 39The SEO Backlinks WordPress plugin is vulnerable to Cross-Site Request Forgery via the loc_config function found in the ~/seo-backlinks.php file which allows attackers to inject arbitrary web scripts, in versions up to a…CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0068 · Published 2021-08-02 · No fix listed CWE-352