WordPress Plugin Vulnerabilities
Yoast SEO 1.2.0-11.5 - Authenticated Stored XSS
Description
The vendor's description, reference included below:
"Yoast SEO 11.6 also fixes a security issue regarding term pages in WordPress. Unfiltered code was allowed in some fields. This, however, does not pose a problem for single user sites. In specific cases, on multisite installs, this might become an issue because of the way user roles function."
Affects Plugins
Fixed in 11.6
Fixed in 11.6 References
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Sybre Waaijer
Submitter
Sybre Waaijer
Submitter website
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-07-09 (about 6 years ago)
Added
2019-07-10 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)
WPScan 