CyberRota Analysis
AI-GeneratedThe Rank Math SEO WordPress plugin prior to version 1.0.280 is vulnerable due to improper escaping of stored redirection source values, enabling administrators to inject malicious JavaScript that executes in the session of any user accessing the administrative list view. This could potentially lead to session hijacking or other malicious actions, particularly affecting Super Administrators in multisite environments. WordPress site administrators and security teams should prioritize this vulnerability to mitigate risks associated with unauthorized script execution.
Original NVD Description
The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.