Vulnerabilities (CVE)

Filtered by vendor Seopanel Subscribe
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28417 1 Seopanel 1 Seo Panel 2024-11-21 3.5 LOW 4.8 MEDIUM
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.
CVE-2020-35930 1 Seopanel 1 Seo Panel 2024-11-21 3.5 LOW 5.4 MEDIUM
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.
CVE-2020-27461 1 Seopanel 1 Seopanel 2024-11-21 6.5 MEDIUM 8.8 HIGH
A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0. This vulnerability allowed for remote code execution through an authenticated file upload via the Settings Panel>Import website function.
CVE-2018-14384 1 Seopanel 1 Seo Panel 2024-11-21 3.5 LOW 4.8 MEDIUM
The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter.