PatchTheCVEnystudio107 vulnerabilities
Recent CVEs affecting nystudio107 products. 3 tracked.
nystudio107 has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-06-12. Highest priority: CVE-2021-41749 (score 64/100).
- CVE-2021-44618 CRITICAL 9.8 DOWNGRADE A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/Url
- CVE-2021-41750 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the SEOmatic plugin 3.4.10 for Craft CMS 3 allows remote attacke
- CVE-2021-41749 CRITICAL 9.8 UPGRADE In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a
FAQ
How do I fix nystudio107 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nystudio107 being exploited right now?
None of the tracked nystudio107 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nystudio107 CVE should I patch first?
CVE-2021-41749 currently ranks highest (64/100): In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a.