seopanel/Seo-Panel

GitHub

github.com

www.seopanel.org

Releases14

Frequency6 months 1 day

Last Release 3 months ago

Stars147

World's first seo control panel for multiple websites

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-47872 ↗	Jan 21, 2026Wednesday, 21 January 2026, 18:16	7.1 HIGH	—
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.
CVE-2021-34117 ↗	Feb 15, 2023Wednesday, 15 February 2023, 22:15	7.5 HIGH	—
SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information.
CVE-2021-29008 ↗	Mar 25, 2021Thursday, 25 March 2021, 20:15	4.8 MEDIUM	3.5 LOW
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "to_time" parameter.
CVE-2021-29009 ↗	Mar 25, 2021Thursday, 25 March 2021, 20:15	4.8 MEDIUM	3.5 LOW
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter.
CVE-2021-29010 ↗	Mar 25, 2021Thursday, 25 March 2021, 20:15	4.8 MEDIUM	3.5 LOW
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter.
CVE-2021-28417 ↗	Mar 18, 2021Thursday, 18 March 2021, 12:15	4.8 MEDIUM	3.5 LOW
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the "search_name" parameter.
CVE-2021-28418 ↗	Mar 18, 2021Thursday, 18 March 2021, 12:15	4.8 MEDIUM	3.5 LOW
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.
CVE-2021-28419 ↗	Mar 18, 2021Thursday, 18 March 2021, 12:15	7.2 HIGH	6.5 MEDIUM
The "order_col" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases.
CVE-2021-28420 ↗	Mar 18, 2021Thursday, 18 March 2021, 12:15	4.8 MEDIUM	3.5 LOW
A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.
CVE-2021-3002 ↗	Jan 1, 2021Friday, 1 January 2021, 19:15	6.1 MEDIUM	4.3 MEDIUM
Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter.
CVE-2020-35930 ↗	Dec 31, 2020Thursday, 31 December 2020, 20:15	5.4 MEDIUM	3.5 LOW
Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.