{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-07T09:33:09.435","vulnerabilities":[{"cve":{"id":"CVE-2021-39413","sourceIdentifier":"cve@mitre.org","published":"2021-11-05T16:15:07.653","lastModified":"2024-11-21T06:19:29.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Cross Site Scripting (XSS) vulnerabilities exits in SEO Panel v4.8.0 via the (1) to_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed.php, (f) rank.php, (g) review.php, (h) saturationchecker.php, (i) social_media.php, and (j) reports.php; the (2) from_time parameter in (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed.php, (f) rank.php, (g) review.php, (h) saturationchecker.php, (i) social_media.php, (j) webmaster-tools.php, and (k) reports.php; the (3) order_col parameter in (a) analytics.php, (b) review.php, (c) social_media.php, and (d) webmaster-tools.php; and the (4) pageno parameter in (a) alerts.php, (b) log.php, (c) keywords.php, (d) proxy.php, (e) searchengine.php, and (f) siteauditor.php."},{"lang":"es","value":"Se presentan múltiples vulnerabilidades de tipo Cross Site Scripting (XSS) en SEO Panel versión v4.8.0 por medio del parámetro (1) to_time en los archivos: (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview.php, (e) pagespeed. php, (f) rank.php, (g) review.php, (h) saturationchecker.php, (i) social_media.php, y (j) reports.php; el parámetro (2) from_time en los archivos: (a) backlinks.php, (b) analytics.php, (c) log.php, (d) overview. php, (e) pagespeed.php, (f) rank.php, (g) review.php, (h) saturationchecker.php, (i) social_media.php, (j) webmaster-tools.php, y (k) reports.php; el parámetro (3) order_col en los archivos: (a) analytics.php, (b) review. php, (c) social_media.php, y (d) webmaster-tools.php; y el parámetro (4) pageno en los archivos: (a) alerts.php, (b) log.php, (c) keywords.php, (d) proxy.php, (e) searchengine.php, y (f) siteauditor.php"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"}]}]}],"references":[{"url":"https://sisl.lab.uic.edu/projects/chess/seo-panel/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://sisl.lab.uic.edu/projects/chess/seo-panel/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}