medium5.4
CVE-2020-35946
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.
Impact
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Semperplugins | All In One Seo Pack | before 3.6.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wpscan.com/vulnerability/10320
- https://www.wordfence.com/blog/2020/07/2-million-users-affected-by-vulnerability-in-all-in-one-seo-pack/
- https://wpscan.com/vulnerability/10320
- https://www.wordfence.com/blog/2020/07/2-million-users-affected-by-vulnerability-in-all-in-one-seo-pack/