PatchTheCVEseomatic vulnerabilities and fixes
Recent CVEs affecting seomatic, with upgrade or downgrade steps. 3 tracked.
seomatic has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-06-12. Highest priority: CVE-2021-41749 (score 64/100).
- CVE-2021-44618 CRITICAL 9.8 DOWNGRADE A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/Url
- CVE-2021-41750 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attacke
- CVE-2021-41749 CRITICAL 9.8 UPGRADE In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a
FAQ
How do I fix seomatic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is seomatic being exploited right now?
None of the tracked seomatic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which seomatic CVE should I patch first?
CVE-2021-41749 currently ranks highest (64/100): In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a.