CVE-2021-44618: NYSTUDIO107 Seomatic

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header.

Affected products

• NYSTUDIO107 Seomatic: version 3.4.12 only

Published 2022-03-11. Last modified 2026-06-17.