title: Smart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting
description: The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Smart SEO Tool – SEO优化插件
vendor: Unknown
versions:
lessThan: 3.0.6, status: affected, version: 3.0.6, versionType: custom
}