Approved changes feed: RSS · Atom

cpe:2.3:a:coleds:simple_seo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorColeds (a08b444a-fc37-5a49-9a04-06a4982242a6)
ProductSimple Seo (a5d1421e-edc2-5781-ad3f-55e56e13f058)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1628 vulnerable 2026-06-08 05:39:13.603421 Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by authenticated users with Contributor and above permissions to inject arbitrary web scripts into posts/pages that execute whenever an administrator access the page.
Published: 2022-09-06T17:18:55.000Z
Updated: 2025-01-31T18:51:59.157Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.