Packagist/nystudio107/craft-seomatic CVE-2018-14716: high 7.5, EPSS 32.67%

SEOmatic plugin for Craft CMS SSTI Vulnerability

Action: Upgrade nystudio107/craft-seomatic to 3.1.4 or later.

composer require nystudio107/craft-seomatic:3.1.4

Affected

Fixed versions

Sources

• osv: GHSA-6j9m-rp7m-3gfg
• https://nvd.nist.gov/vuln/detail/CVE-2018-14716
• https://github.com/nystudio107/craft-seomatic/commit/1e7d1d084ac3a89e7ec70620f2749110508d1ce1
• https://github.com/nystudio107/craft-seomatic
• https://github.com/nystudio107/craft-seomatic/releases/tag/3.1.4
• https://twitter.com/nystudio107/status/1021847835418009605
• https://twitter.com/nystudio107/status/1021855169515057152
• https://www.exploit-db.com/exploits/45108
• http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic

CVE-2018-14716 · published 2022-05-13T01:19:08Z · modified 2024-02-16T08:14:13.465392Z · JSON