CVE-2026-82884

Name of the Vulnerable Software and Affected Versions All in One SEO versions prior to 5.0.0.1

Description Insufficient sanitization and escaping of content stored in posts before it is rendered in the post editor allows users with the contributor role or higher to execute Stored Cross-Site Scripting (XSS) attacks. This occurs specifically via the ai-assistant block and is triggered when a user with higher privileges edits the affected post.

Recommendations Update All in One SEO to version 5.0.0.1 or later.