nystudio107 SEOmatic 3.1.28 for Craft CMS

CPE Details

nystudio107 SEOmatic 3.1.28 for Craft CMS
nystudio107
seomatic
3.1.28
2019-12-02
16h34 +00:00
2019-12-02
16h34 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:nystudio107:seomatic:3.1.28:*:*:*:*:craft_cms:*:*

Informations

Vendor

nystudio107

Product

seomatic

Version

3.1.28

Target Software

craft_cms

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-41749 2022-06-12 09h00 +00:00 In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.
9.8
Critical
CVE-2020-12790 2020-05-11 16h08 +00:00 In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.
7.5
High