Em resumo
- CVE-2021-41750 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta nystudio107/craft-seomatic, seomatic (nystudio107).
- Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 66.3% das vulnerabilidades.
- Correção: atualize para 3.4.11 ou posterior.
Description
A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName parameter containing an arbitrary filename with the intended content-type to be rendered in the user's browser as the extension.
NVD description
A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /index.php?action=seomatic/file/seo-file-link with url parameter containing the base64 encoded URL of a malicious web page / file and fileName parameter containing an arbitrary filename with the intended content-type to be rendered in the user's browser as the extension.
Mais vulnerabilidades de nystudio107/craft-seomatic
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free