All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic, 6f351bbd478531d8361126335b04afe8d56a098f

CVE, Research URL: 6f351bbd478531d8361126335b04afe8d56a098f
Home page URL: Security reports for All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
Application: All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
Published on: May 31, 2014
Research Description: All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic [all-in-one-seo-pack] < 2.1.6 All in One SEO <= 2.1.5 - Cross-Site Scripting The All in One SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the SEO settings for posts in versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with subscriber level permissions and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 2.1.6.
Status: vulnerable