Vulnerabilidades de Kcseopro

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Kcseopro: 2 registro(s), com severidade, exploração e correções.

AdWords Conversion Tracking Code 1 WP SEO Structured Data Schema 1

Somente exploradas (KEV) →

CVE-2026-3604 Média · 4.9 CWE-79 12/05/2026

WP SEO Structured Data Schema <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_kcseo_ative_tab' Parameter

The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `_kcseo_ative_tab` parameter in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CVE-2025-62118 Média · 6.5 CWE-79 31/12/2025

WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through <= 1.0.