CVE-2021-3258: Qa-Themes q2a Ultimate Seo

Medium severity, CVSS 5.4. EPSS: 1.6% chance of exploitation in the next 30 days.

Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remote code execution.

Affected products

Published 2021-02-05. Last modified 2026-06-17.