Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2020-35946
Disclosure Date: January 01, 2021 (last updated February 22, 2025)
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.
0
Attacker Value
Unknown
CVE-2013-5988
Disclosure Date: February 11, 2020 (last updated February 21, 2025)
A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
0
Attacker Value
Unknown
CVE-2019-16520
Disclosure Date: October 16, 2019 (last updated November 27, 2024)
The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement.
0
Attacker Value
Unknown
CVE-2015-0902
Disclosure Date: April 03, 2015 (last updated October 05, 2023)
The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code.
0
