Security Advisory

CVE-2022-1093

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-05-23 07:15:25

Last updated 2024-08-02 23:55:22

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting it to the page, allowing a high privilege user such as an administrator to inject arbitrary javascript into the page even when unfiltered html is disallowed.

← Browse all CVEs View on cve.org ↗