TI-2020-18387 CVE-2020-35946 · GHSA-3456-r253-4f5r
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.
Priority LOW 26
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.
3 records
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.
A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeh…