Medium severity6.1NVD Advisory· Published Jan 24, 2022· Updated Jun 17, 2026

CVE-2021-24976

Description

The Smart SEO Tool WordPress plugin before 3.0.6 does not sanitise and escape the search parameter before outputting it back in an attribute when the TDK optimisation setting is enabled, leading to a Reflected Cross-Site Scripting

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Smart Tool Tipcpe-rescue
Package: https://wordpress.org/plugins/wp-smart-tool-tip
WordPress/Smart SEO Toolllm-fuzzy
Range: <3.0.6

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/2637305nvdPatchThird Party Advisory
wpscan.com/vulnerability/7d5f58a8-bee4-46be-9c08-d272678338f0nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000