Test ID:	1.3.6.1.4.1.25623.1.0.124754
Category:	Web application abuses
Title:	WordPress Yoast SEO Plugin < 2.2 XSS Vulnerability
Summary:	The WordPress plugin 'Yoast SEO' is prone to a cross-site; scripting (XSS) vulnerability.
Description:	Summary: The WordPress plugin 'Yoast SEO' is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: WordPress SEO by Yoast plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_title parameter to wp-admin/post-new.php. Affected Software/OS: WordPress Yoast SEO plugin prior to version 2.2. Solution: Update to version 2.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6692 BugTraq ID: 75196 http://www.securityfocus.com/bid/75196 http://seclists.org/fulldisclosure/2015/Jun/40 http://packetstormsecurity.com/files/132294/WordPress-Yoast-2.1.1-Cross-Site-Scripting.html https://inventropy.us/blog/yoast-seo-plugin-cross-site-scripting-vulnerability/ https://wordpress.org/support/topic/security-issue-with-post-title-field-xss-vulnerability http://www.securitytracker.com/id/1032580
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.