CVE-2025-10357 — Simple SEO < 2.0.32 - Contributor+ Stored XSS
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contrib…
Published: 2025-10-14 · CVSS: 6.1 · CVSS 3.1
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7