WordPress Plugin Vulnerabilities
Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)
Description
A stored XSS scripting vulnerability was discovered in the plugin, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found.
Affects Plugins
Fixed in version 3.4.1
References
Classification
Miscellaneous
Original Researcher
Hammad Shamsi
Submitter
Anonymous
Verified
No
Timeline
Publicly Published
2016-08-02 (about 6 years ago)
Added
2016-08-03 (about 6 years ago)
Last Updated
2021-04-05 (about 2 years ago)