Nystudio107

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-12790 May 11, 19:15 PHP HIGH POC PATCH This Week

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP Code Injection Seomatic Nystudio107

NVD GitHub

CVSS 3.1

7.5

EPSS

2.2%

CVE-2018-14716 Aug 06, 20:29 PHP HIGH POC PATCH THREAT This Week

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Code Injection Seomatic Nystudio107

NVD GitHub Exploit-DB

CVSS 3.1

7.5

EPSS

33.0%

CVE-2020-12790 PHP

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

PHP Code Injection Seomatic +1

NVD GitHub

CVE-2018-14716 PHP

EPSS 33% CVSS 7.5

HIGH POC PATCH THREAT This Week

RCE Code Injection Seomatic +1

NVD GitHub Exploit-DB