EDB-45108

PoC

Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection

view exploit source exploit_dbtype webappsauthor 0xB455published 2018-07-31catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-14716UShigh7.5Exploit
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the ca…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan