Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2021-28418

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.

CVSS 3.1 · 4.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Seopanel
Products
Seo Panel
CVE-2021-28417

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.

CVSS 3.1 · 4.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Seopanel
Products
Seo Panel
CVE-2020-35930

Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Seopanel
Products
Seo Panel
CVE-2020-27461

A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote code execution through an authenticated file upload via the Settings Panel>Import website function.

CVSS 3.1 · 8.8 High EPSS 3.7% KEV · Not listed
Vendors
Seopanel
Products
Seopanel
CVE-2018-14384

The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Seopanel
Products
Seo Panel