TI-2020-18856 Aliases CVE-2020-36664 GHSA-w745-xjqx-7wp8

Artesãos SEOTools SEOMeta.php setTitle redirect

LOW 28CWE-601Published 2023-03-04 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Spoofing
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-601.

Summary

A vulnerability has been found in Artesãos SEOTools up to 0.17.1 and classified as problematic. This vulnerability affects the function setTitle of the file SEOMeta.php. The manipulation of the argument title leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The name of the patch is ca27cd0edf917e0bc805227013859b8b5a1f01fb. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222232.

Why it matters now

EPSS 0.00638 50th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed artesaos/seotools (Packagist): 0.17.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Artesãos	SEOTools	0.17.0; 0.17.1	—	No fix listed	CNA
—	artesaos/seotools (Packagist)	before 0.17.2	0.17.2	Patch available	GHSA-w745-xjqx-7wp8

SEOTools VendorArtesãos Affected 0.17.0; 0.17.1 Fixed in — No fix listed CNA
artesaos/seotools (Packagist) Vendor— Affected before 0.17.2 Fixed in 0.17.2 Patch available GHSA-w745-xjqx-7wp8

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:seotool_project:seotool::::::laravel::*	before 0.17.2	Vulnerable	Artesãos

cpe:2.3:a:seotool_project:seotool:*:*:*:*:*:laravel:*:* Versions before 0.17.2 Vulnerable ·Artesãos

Remediation

Fix · GHSA-w745-xjqx-7wp8 artesaos/seotools (Packagist) Fixed in 0.17.2 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2020-36664
2026-10-03 Alias added: GHSA-w745-xjqx-7wp8
2026-10-25 EPSS moved to the 50th–90th percentile

References

Exploit 1

https://github.com/artesaos/seotools/pull/201

Patch 2

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2020-36664

Other 1

https://github.com/artesaos/seotools

TI-2020-18857 Artesãos SEOTools TwitterCards.php eachValue redirect CVSS 3.1MEDIUM 6.1
TI-2020-18855 Artesãos SEOTools OpenGraph.php makeTag redirect CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences