Vulnerabilities > Nystudio107 > Seomatic > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-06-12 | CVE-2021-41749 | Code Injection vulnerability in Nystudio107 Seomatic In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution. | 9.8 |
| 2022-03-11 | CVE-2021-44618 | Code Injection vulnerability in Nystudio107 Seomatic 3.4.12 A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header. | 9.8 |