medium4.8Public exploit code
CVE-2021-28420
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Seo Panel 4.8.0 - 'from_time' Reflected XSS2021-06-03 · webapps · php
Impact
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seopanel | Seo Panel | Version 4.8.0 |