Description
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter.
Remediation
References
Related Vulnerabilities
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2025-49704)
Joomla! Core Cross-Site Scripting (1.6.0 - 3.6.0)
WordPress Plugin YITH WooCommerce PDF Invoice and Shipping List Security Bypass (1.2.12)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20100)
WordPress Plugin Thrive Headline Optimizer Security Bypass (1.3.7.2)