Added escape for page filters to avoid XSS

Skrevet den 3. maj 2019 af i Yoast SEO

Stored DOM-based Cross-Site Scripting in Royal Addons for Elementor Google Maps Widget

9. november 2026

Authenticated attackers with Contributor-level access…

Læs mere »

Stored Cross-Site Scripting in Shortcodes Ultimate Lightbox Shortcode

9. november 2026

Shortcodes Ultimate validated the src…

Læs mere »

Stored Cross-Site Scripting in Royal Addons for Elementor Countdown Widget

9. november 2026

Royal Addons for Elementor up…

Læs mere »

Escaping was missing for page filters.

This vulnerability affects the following application versions:

Yoast SEO 1.5.5
Yoast SEO 1.5.5.1
Yoast SEO 1.5.5.2
Yoast SEO 1.5.5.3
Yoast SEO 1.5.6
Yoast SEO 1.6
Yoast SEO 1.6.1

Skriv et svar Annuller svar

Om os

Standoutmedia er et webbureau dedikeret til WordPress platformen.
Vi driver egne hostingløsninger, hvor tusindvis af kunder hver dag modtager sikkerhedsopdateringer.

Læs mere om os her: https://standoutmedia.dk/