CVE-2024-10515

Name of the Vulnerable Software and Affected Versions Squirrly SEO WordPress plugin versions prior to 12.3.21

Description A vulnerability was found in the SEO Plugin by Squirrly SEO that allows for Stored XSS on behalf of the editor by embedding malicious script. This can lead to account takeover backdoor.

Recommendations For versions prior to 12.3.21, update to version 12.3.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the editor role to minimize the risk of exploitation. Avoid using the plugin until the issue is resolved.