medium6.1
CVE-2025-10357
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role…
Impact
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.
Affected products
| Product | Affected versions |
|---|---|
| Simple SEO WordPress Plugin | before 2.0.32 |
Versions were read from the advisory text. No structured product data has been published for this record yet.