Arbitrary Web Script Injection Vulnerability in SEO Manager Plugin

CVE-2024-9521

What is CVE-2024-9521?

The SEO Manager plugin for WordPress has a vulnerability that allows authenticated users with contributor-level permissions and above to exploit stored cross-site scripting. This vulnerability arises from insufficient input sanitization and output escaping on user-supplied attributes, enabling attackers to inject arbitrary scripts into web pages. When these compromised pages are accessed by other users, the injected scripts can execute, potentially leading to a variety of malicious activities, including data theft, session hijacking, or spreading malware.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References