Seomatic

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-12790 PHP HIGH POC PATCH This Week

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Code Injection PHP Seomatic

NVD GitHub

CVSS 3.1

7.5

EPSS

2.2%

CVE-2018-14716 PHP HIGH POC PATCH THREAT This Week

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Code Injection RCE Seomatic

NVD GitHub Exploit-DB

CVSS 3.1

7.5

EPSS

33.0%

CVE-2020-12790 PHP

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Code Injection PHP Seomatic

NVD GitHub

CVE-2018-14716 PHP

EPSS 33% CVSS 7.5

HIGH POC PATCH THREAT This Week

Code Injection RCE Seomatic

NVD GitHub Exploit-DB