CVE-2021-28418: Seopanel Seo Panel

Medium severity, CVSS 4.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the "category" parameter.

Affected products

• Seopanel Seo Panel: version 4.8.0 only

Published 2021-03-18. Last modified 2026-06-17.