Seo Rank Reporter Vulnerabilities

Update the plugin. Marcin Probola discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress SEO Rank Reporter Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests v...

Affected:

up to 2.2.3

Fixed in:

2.2.3

Disclosed:

Nov 24, 2023

The SEO Rank Reporter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘keyword_item’ and 'entry_url' parameter in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scr...

CVSS:

6.1

Affected:

up to 2.2.2

Fix:

No patched version reported

Disclosed:

Nov 24, 2015

Because of this vulnerability, authenticated administrators can inject html or JS code. Vulnerable parameters are "keyword_item" and "entry_url". Update the plugin.

Affected:

up to 2.2.3

Fixed in:

2.2.3

Disclosed:

Nov 24, 2015

The SEO Rank Reporter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘keyword_item’ and 'entry_url' parameter in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scr...

Affected:

up to 2.2.2

Fix:

No patched version reported

Disclosed:

Nov 24, 2015

The seo-rank-reporter WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting (XSS) security vulnerability.

Affected:

up to 2.2.2

Fix:

No patched version reported