Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4
CVE-2021-24153
- EPSS 0.33%
- Veröffentlicht 05.04.2021 19:15:14
- Zuletzt bearbeitet 21.11.2024 05:52:28
A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.
9.8
CVE-2019-13478
- EPSS 0.27%
- Veröffentlicht 09.07.2019 23:15:10
- Zuletzt bearbeitet 21.11.2024 04:24:59
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.
6.6
CVE-2018-19370
- EPSS 0.18%
- Veröffentlicht 28.11.2018 22:29:00
- Zuletzt bearbeitet 21.11.2024 03:57:49
A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execution on the Operating System via a ZIP import.