WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-45065

7.1HIGH

Key Information:

Vendor
WordPress
Status
Seo Plugin By Squirrly Seo
Vendor
CVE Published:
8 May 2023

Summary

This vulnerability in the Squirrly SEO Plugin allows attackers to exploit reflected cross-site scripting (XSS), which can lead to unauthorized actions and phishing attacks by injecting malicious scripts into web pages. Affected users should ensure they're using the latest version of the plugin to mitigate risks.

Affected Version(s)

SEO Plugin by Squirrly SEO <= 12.1.20

References

https://patchstack.com/database/vulnerability/squirrly-se...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.