WordPress Plugin Vulnerabilities

All in One SEO Pack <= 2.0.3 - XSS

Description

The All in One SEO Pack WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
all-in-one-seo-pack
Fixed in 2.0.3.1

References

CVE
CVE-2013-5988
URL
https://packetstormsecurity.com/files/#123490/
URL
https://seclists.org/bugtraq/2013/Oct/8

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
Yes
WPVDB ID
0ddc6e3f-8a02-43d9-ba63-e3d94e7b0a1b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-05-02
Title
Section Widget <= 3.3.1 - Reflected Cross-Site Scripting
Published
2025-04-01
Title
Leartes TRY Exchange Rates <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-04-21
Title
WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields
Published
2016-05-11
Title
BulletProof Security <= .53.3 - Multiple XSS Vulnerabilities
Published
2014-04-25
Title
WP eBay Product Feeds < 1.2 - Cross-Site Scripting via rss_url Parameter