Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)
Description
A stored XSS scripting vulnerability was discovered in the plugin, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.
Affects Plugins
Fixed in version 3.4.1✓
Classification
Miscellaneous
Original Researcher
Hammad Shamsi
Submitter
Anonymous
Verified
No
Timeline
Publicly Published
2016-08-02 (about 5 years ago)
Added
2016-08-03 (about 5 years ago)
Last Updated
2021-04-05 (about 6 months ago)