CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress

Medium · published January 1, 2021

CVSS v3.1
5.4
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.7th percentile
Published
2021-01-01T03:28Z
EPSS history
Timeline
  • 01 JAN 03:28Z
    An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress
    cvelistv5