Packagist/nystudio107/craft-seomatic CVE-2021-41750: medium 6.1, EPSS 1.11%

Cross-site Scripting in SEOmatic plugin

Action: Upgrade nystudio107/craft-seomatic to 3.4.11 or later.

composer require nystudio107/craft-seomatic:3.4.11

Affected

Fixed versions

Sources

• osv: GHSA-6hjc-m38h-7jhh
• https://nvd.nist.gov/vuln/detail/CVE-2021-41750
• https://github.com/nystudio107/craft-seomatic/commit/4e46b792ce973ac0c652fb330055f41aca1981c8
• https://github.com/nystudio107/craft-seomatic/commit/5f2cdc7c39e0a4bfb60d2f84131508f0a87b2873
• https://github.com/nystudio107/craft-seomatic
• https://github.com/nystudio107/craft-seomatic/blob/develop/CHANGELOG.md

CVE-2021-41750 · published 2022-06-13T00:00:19Z · modified 2023-11-08T04:07:01.196508Z · JSON