Intel

AIKIDO-2026-10123

melbahja/seo is vulnerable to Cross-site Scripting (XSS)

Cross-site Scripting (XSS) Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.

42

Medium Risk

This Affects:

PHPmelbahja/seo
1.0.0 - 2.1.1
Fixed in 3.0.0

TL;DR

Affected versions of this package are vulnerable to a cross-site scripting (XSS) attack due to insufficient sanitization of potentially user-supplied input, allowing attackers to inject and execute arbitrary scripts in the context of the application.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

melbahja/seo is vulnerable to Cross-site Scripting (XSS) in versions 1.0.0 - 2.1.1.

How to fix this

Upgrade the melbahja/seo library to a patch version.

Background Info