Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Seomatic 注入漏洞
Vulnerability Description
Pixel＆Tonic Craft CMS是美国Pixel＆Tonic公司的一套内容管理系统（CMS）。Seomatic是其中的一个SEO（搜索引擎优化）组件。 Seomatic 3.2.49之前版本（用于Craft CMS）中存在安全漏洞，该漏洞源于helpers / DynamicMeta.php文件无法正确清理URL。攻击者可利用该漏洞注入Twig模板，获取凭证。
CVSS Information
N/A
Vulnerability Type
N/A