{"action":"Upgrade nystudio107/craft-seomatic to 3.1.4 or later.","affected":[{"fixed":"3.1.4","introduced":"0"}],"component":"nystudio107/craft-seomatic","cve_ids":["CVE-2018-14716"],"ecosystem":"Packagist","epss":0.32673,"exploited":false,"fixed_versions":["3.1.4"],"ghsa_id":"GHSA-6j9m-rp7m-3gfg","id":"tcs_01M5KEX534VTZPZ66DFBA3Y082","modified_at":"2024-02-16T08:14:13.465392Z","published_at":"2022-05-13T01:19:08Z","references":["https://osv.dev/vulnerability/GHSA-6j9m-rp7m-3gfg","https://nvd.nist.gov/vuln/detail/CVE-2018-14716","https://github.com/nystudio107/craft-seomatic/commit/1e7d1d084ac3a89e7ec70620f2749110508d1ce1","https://github.com/nystudio107/craft-seomatic","https://github.com/nystudio107/craft-seomatic/releases/tag/3.1.4","https://twitter.com/nystudio107/status/1021847835418009605","https://twitter.com/nystudio107/status/1021855169515057152","https://www.exploit-db.com/exploits/45108","http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6j9m-rp7m-3gfg","url":"https://osv.dev/vulnerability/GHSA-6j9m-rp7m-3gfg"}],"summary":"SEOmatic plugin for Craft CMS SSTI Vulnerability"}