Nystudio107 Seomatic
5 CVEs affecting Nystudio107 Seomatic. Latest disclosed: 2022-06-12. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41749 | Critical | 9.8 | 2022-06-12 | In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for rem… |
CVE-2021-44618 | Critical | 9.8 | 2022-03-11 | A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header. |
CVE-2020-12790 | High | 7.5 | 2020-05-11 | In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection an… |
CVE-2018-14716 | High | 7.5 | 2018-08-06 | A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorr… |
CVE-2021-41750 | Medium | 6.1 | 2022-06-12 | A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attackers to inject arbitrary web script via a GET to /i… |