medium4.8Public exploit code
CVE-2021-28418
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Seo Panel 4.8.0 - 'category' Reflected XSS2021-06-02 · webapps · php
Impact
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seopanel | Seo Panel | Version 4.8.0 |