Seopanel Seo Panel
22 CVEs affecting Seopanel Seo Panel. Latest disclosed: 2025-04-17. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-10839 | High | 8.8 | 2017-08-29 | SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors. |
CVE-2025-29452 | High | 7.6 | 2025-04-17 | An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component. |
CVE-2025-29451 | High | 7.6 | 2025-04-17 | An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component. |
CVE-2021-34117 | High | 7.5 | 2023-02-15 | SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive inform… |
CVE-2021-28419 | High | 7.2 | 2021-03-18 | The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databas… |
CVE-2024-22643 | Medium | 6.5 | 2024-01-30 | A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets. |
CVE-2021-39413 | Medium | 6.1 | 2021-11-05 | Multiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.ph… |
CVE-2021-3002 | Medium | 6.1 | 2021-01-01 | Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter. |
CVE-2017-10838 | Medium | 6.1 | 2017-08-29 | Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2020-35930 | Medium | 5.4 | 2020-12-31 | Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI. |
CVE-2024-22648 | Medium | 5.3 | 2024-01-30 | A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports… |
CVE-2024-22647 | Medium | 5.3 | 2024-01-30 | An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow… |
CVE-2024-22646 | Medium | 5.3 | 2024-01-30 | An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exi… |
CVE-2021-29010 | Medium | 4.8 | 2021-03-25 | A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter. |
CVE-2021-29009 | Medium | 4.8 | 2021-03-25 | A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter. |
CVE-2021-29008 | Medium | 4.8 | 2021-03-25 | A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "to_time" parameter. |
CVE-2021-28420 | Medium | 4.8 | 2021-03-18 | A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter. |
CVE-2021-28418 | Medium | 4.8 | 2021-03-18 | A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter. |
CVE-2021-28417 | Medium | 4.8 | 2021-03-18 | A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter. |
CVE-2018-14384 | Medium | 4.8 | 2020-03-02 | The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability, allowing remote authenticated atta… |