SEOpanel SEO Panel 4.8.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*

part: a version: 4.8.0 update: *

VendorSeopanel (70a1b220-14e2-5a08-8223-16600ada7bc0)
ProductSeo Panel (91a9b3d7-cef6-5715-8988-0086f5ff6d31)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/seopanel/seo-panel purl2cpe 2026-06-01 10:11:40.211804
pkg:sourceforge/seopanel purl2cpe 2026-06-01 10:11:40.211806

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3002 vulnerable 2026-06-08 05:33:50.618563 Details available
Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter.
Published: 2021-01-01T18:14:27.000Z
Updated: 2024-08-03T16:45:50.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39413 vulnerable 2026-06-08 05:33:50.185802 Details available
Multiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed.php, (f) rank.php, (g) review.php, (h) saturationchecker.php, (i) social_media.php, and (j) reports.php; the (2) from_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed.php, (f) rank.php, (g) review.php, (h) saturationchecker.php, (i) social_media.php, (j) webmaster-tools.php, and (k) reports.php; the (3) order_col parameter in (a) analytics.php, (b) review.php, (c) social_media.php, and (d) webmaster-tools.php; and the (4) pageno parameter in (a) alerts.php, (b) log.php, (c) keywords.php, (d) proxy.php, (e) searchengine.php, and (f) siteauditor.php.
Published: 2021-11-05T15:12:25.000Z
Updated: 2024-08-04T02:06:42.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29010 vulnerable 2026-06-08 05:31:25.337606 Details available
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter.
Published: 2021-03-25T19:21:50.000Z
Updated: 2024-08-03T21:55:12.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29009 vulnerable 2026-06-08 05:31:25.337342 Details available
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter.
Published: 2021-03-25T19:21:45.000Z
Updated: 2024-08-03T21:55:12.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29008 vulnerable 2026-06-08 05:31:25.336979 Details available
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "to_time" parameter.
Published: 2021-03-25T19:21:39.000Z
Updated: 2024-08-03T21:55:12.271Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28420 vulnerable 2026-06-08 05:31:24.173205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28419 vulnerable 2026-06-08 05:31:24.172776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28418 vulnerable 2026-06-08 05:31:24.172238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28417 vulnerable 2026-06-08 05:31:24.171821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35930 vulnerable 2026-06-08 05:25:02.348514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.