VULNERABILITY INTELLIGENCE

CVE-2024-22646

CVSS score5.3 MEDIUM

EPSS probability0.58%

CISA KEVNot currently listed

Published2024-01-30

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.

Weakness classification

nvd@nist.gov: CWE-209
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-209

Primary references

cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory