CVE Database /
CVE-2019-13478
CVE · Critical
CVE-2019-13478 — Yoast SEO – Advanced SEO with real-time guidance and built-in AI [wordpress-seo] < 11.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-13478
|
Yoast SEO – Advanced SEO with real-time guidance and built-in AI [wordpress-seo] < 11.6 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Critical
9.8
|
< 11.6
|
11.6 |
2019-07-09 |
—
|
CVE-2019-13478
The Yoast SEO plugin through version 11.5 contains a stored cross-site scripting vulnerability in term descriptions resulting from inadequate sanitization of user input and improper escaping of output. An authenticated attacker possessing post editor permissions could introduce malicious scripts that would run when other users view the affected pages. The vulnerability was resolved in version 11.6.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings