CVE-2021-41749

—

CVSS 3.1

9.8 critical

EPSS

18%p97

Published

Jun 12, 2022 (Jun 12, 2022)

Modified

Jun 17, 2026

Description

In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.

Vendors: nystudio107
Products: seomatic
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (18.1%)

In the news0 stories

No ingested article mentions this CVE yet.