This patch resolves by properly sanitizing the replytocom URL parameter, which was previously vulnerable to reflected XSS attacks. The updated code ensures that user-supplied input is safely handled, preventing malicious script injection and improving front-end security.
This vulnerability affects the following application versions:
- All in One SEO Pack 4.3.7.1
- All in One SEO Pack 4.7.3
- All in One SEO Pack 4.7.4.1
- All in One SEO Pack 4.7.4.2
- All in One SEO Pack 4.7.5
- All in One SEO Pack 4.7.5.1
- All in One SEO Pack 4.7.6
- All in One SEO Pack 4.7.7
- All in One SEO Pack 4.7.7.1
- All in One SEO Pack 4.7.7.2
- All in One SEO Pack 4.7.8
- All in One SEO Pack 4.7.9
- All in One SEO Pack 4.7.9.1
- All in One SEO Pack 4.8.0
- All in One SEO Pack 4.8.1
- All in One SEO Pack 4.8.1.1