CVE-2023-40680

概要

参考情報

• patchstack.com/database/vulnerability/wordpress-seo/wordpress-yoast-seo-plugin-21-0-cross-site-scripting-xss-vulnerability · Third Party Advisory

yoast seo のその他の脆弱性

• CVE-2023-28775中 5.3Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4.
• CVE-2023-32300中 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Yoast Yoast SEO: Local plugin <= 14.8 versions.
• CVE-2023-28785中 5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Yoast Yoast SEO: Local plugin <= 14.9 versions.
• CVE-2021-25118中 5.3The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/po…
• CVE-2021-36788中 5.4The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.