Cross-site scripting Seo Panel
Affected Products: Seo Panel 3.x
Affected versions: Seo Panel 3.2.1, possibly earlier.
Description:
The vulnerability allows malicious people to conduct XSS attacks.
1. The vulnerability is caused due to insufficient input validation in the URL in the script support.php in includes / sp-common.php. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.
2. The vulnerability is caused due to insufficient input validation in the parameter “pageno” in script seo-plugins-manager.php (“sec” is “listinfo”, and “pid” is set). This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.
Manufacturer URL: http://www.seopanel.in/
