Intrusion PreventionWordPress.Yoast.SEO.XSS
Description
This indicates the detection of an attack attempt against a Cross-Site Scripting (XSS) vulnerability in WordPress Yoast SEO plugin.
The vulnerability is due to insufficient sanitization of user supplied data. A remote attacker maybe able to exploit this to execute arbitrary script code within the context of the application.
Affected Products
Yoast SEO plugin prior to 5.8.0
Impact
System Compromise : Remote attackers can execute arbitrary script code in the context of the affected site.
Recommended Actions
Upgrade to the latest version available from the website.
https://wordpress.org/plugins/wordpress-seo/#developers
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2022-02-03 | 19.253 | Sig Added |
| 2019-06-06 | 14.627 | Severity:high:medium |
| ID | 44958 |
| Created | Nov 24, 2017 |
| Updated | Feb 02, 2022 |
| Risk |
|
| CVE ID | CVE-2017-16842 |
| Exploit Prediction Score | 0.07% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | PHP_app |