VULNERABILITY INTELLIGENCE

CVE-2021-28420

CVSS score4.8 MEDIUM

EPSS probability1.93%

CISA KEVNot currently listed

Published2021-03-18

Last modified2026-06-17

Description

A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the "from_time" parameter.