title: SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scripting
description: The SEO Plugin by Squirrly SEO WordPress plugin before 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: SEO Plugin by Squirrly SEO
vendor: Unknown
versions:
lessThan: 11.1.12, status: affected, version: 11.1.12, versionType: custom
}