A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.
References
Link | Resource |
---|---|
https://github.com/seopanel/Seo-Panel/issues/208 | Exploit Issue Tracking Third Party Advisory |
http://packetstormsecurity.com/files/162914/Seo-Panel-4.8.0-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2021-03-18 05:15
Updated : 2021-12-03 09:59
NVD link : CVE-2021-28417
Mitre link : CVE-2021-28417
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
seopanel
- seo_panel