CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific…

published October 16, 2019

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01532 · 74.6th percentile
Published
2019-10-16T13:58Z
EPSS history
Timeline
  • 16 OCT 13:58Z
    The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific…
    cvelistv5