CVE-2021-47872: Seo Panel

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.

Affected products

• Seo Panel Seo Panel: version 4.8.0 only

Published 2026-01-21. Last modified 2026-06-17.