MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2024-45456

CVSS 6.5v3.1pub. 2024-09-15upd. 2026-04-23

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnited WP Meta SEO wp-meta-seo allows Stored XSS.This issue affects WP Meta SEO: from n/a through <= 4.5.13.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

  • Joomunited Wp Meta Seo

    APP
    Joomunited
    < 4.5.14
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2023-6961HIGH7.2ten sam produkt

The WP Meta SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Referer’ header in ...

CVE-2023-1381HIGH8.8ten sam produkt

The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipula...

CVE-2023-0875HIGH8.8ten sam produkt

The WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, l...

CVE-2024-45455MEDIUM5.9ten sam produkt

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnit...

CVE-2023-6962MEDIUM5.3ten sam produkt

The WP Meta SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, an...