Description Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter. Remediation References CVE-2021-3002 Related Vulnerabilities WordPress Plugin W3 Total Cache Information Disclosure (0.9.2.4) WordPress Plugin SlideDeck 2 Lite Responsive Content Slider Multiple Cross-Site Scripting Vulnerabilities (2.1.20130228) XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12139) LimeSurvey Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5573) WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login PHP Object Injection (3.7.9.2) Severity Medium Classification CVE-2021-3002 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities