All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic, 99cef9ace89776148234e4f94912711aab354a3a

CVE, Research URL: 99cef9ace89776148234e4f94912711aab354a3a
Home page URL: Security reports for All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
Application: All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
Published on: Apr 20, 2015
Research Description: All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic [all-in-one-seo-pack] < 2.2.6.2 All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting The All in One SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.2.6.1 due to insufficient input sanitization and output escaping on add_query_arg and remove_query_arg. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 2.2.6.2.
Status: vulnerable