Veille CVE

Recherche « Unknown EONSR AEO Agent »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown EONSR AEO Agent » ✕
  1. CVE-2026-11588 6.1 Moyenne

    Unknown EONSR AEO Agent

    The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post, allowing unauthenticated attackers to create administrator-attributed published posts containing arbitrary web scripts that execute in the browser of any visitor, including administrators (Stored XSS).