CVE-2022-0701 – SEO 301 Meta <= 1.9.1 - Admin+ Stored Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2022-0701

The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed El plugin SEO 301 Meta de WordPress versiones hasta 1.9.1, no escapa a su configuración de Petición y Destino, permitiendo a usuarios con altos privilegios, como el administrador, llevar a cabo ataques de tipo Cross-Site Scripting incluso cuando la capacidad unfiltered_html no está permitida The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. • https://wpscan.com/vulnerability/68882f81-12d3-4e98-82ff-6754ac4ccfa1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •