CVE-2021-25019: SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scripting
The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-25019?
CVE-2021-25019 is classified as a medium severity vulnerability due to its potential to enable Reflected Cross-Site Scripting attacks.
How do I fix CVE-2021-25019?
To fix CVE-2021-25019, update the Squirrly SEO plugin to version 11.1.12 or later.
What does CVE-2021-25019 affect?
CVE-2021-25019 affects versions of the Squirrly SEO WordPress plugin prior to 11.1.12.
Is CVE-2021-25019 exploitable?
Yes, CVE-2021-25019 is exploitable and can lead to Reflected Cross-Site Scripting on affected WordPress installations.
What is the impact of CVE-2021-25019?
The impact of CVE-2021-25019 may allow attackers to inject malicious scripts into admin pages, posing a significant security risk.