CVE-2021-24153 – Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)

https://notcve.org/view.php?id=CVE-2021-24153

A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found. Se detectó una vulnerabilidad de tipo Cross-Site Scripting Almacenado en el plugin Yoast SEO WordPress versiones anteriores a 3.4.1, que tenía filtros de lista negra incorporados que incluían paréntesis en la lista negra, así como varias funciones como alertas pero se encontraron omisiones A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting parentheses as well as several functions such as alert, but bypasses were found. • https://packetstormsecurity.com/files/138192 https://plugins.trac.wordpress.org/changeset/1466243/wordpress-seo https://wpscan.com/vulnerability/77810044-394d-4314-b9a1-20c7dca726dc • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •