CVE-2021-34665 MEDIUM

CVE-2021-34665: WP SEO Tags <= 2.2.7 Reflected Cross-Site Scripting

Vendor Wp Seo Tags

Product WP SEO Tags

Weakness CWE-79 · XSS

Published August 16, 2021

Last update May 23, 2025

View on NVD All CVEs

CVSS base score

6.1/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

The WP SEO Tags WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the saq_txt_the_filter parameter in the ~/wp-seo-tags.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.2.7.

Key dates

02Disclosure timeline

August 16, 2021 CVE published

May 23, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-34665 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2024-30178 WordPress Simply Static plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-37955 WordPress GutSlider – All in One Block Slider plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability CVE-2019-25084 Hide Files on GitHub options.js addEventListener cross site scripting CVE-2022-46181 Gotify server XSS vulnerability in the application image file upload CVE-2024-56411 PhpSpreadsheet has Cross-Site Scripting (XSS) vulnerability of the hyperlink base in the HTML page header