https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T05:58:52.575504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-34997 cnvd-2020-34997 2026-10-20T05:58:52.579193+00:00 cnvd-2020-34997 https://cve.radiocsirt.org/vuln/euvd-2026-41428 EUVD-2026-41428 2026-10-20T05:58:52.579237+00:00 EUVD-2026-41428 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12790 fkie_cve-2020-12790 2026-10-20T05:58:52.579256+00:00

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.

 https://cve.radiocsirt.org/vuln/ghsa-23q7-59jj-2pj4 GHSA-23q7-59jj-2pj4 — SEOmatic for CraftCMS allows Server-Side Template Injection 2026-10-20T05:58:52.579292+00:00

Affected: Packagist: nystudio107/craft-seomatic

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.

 https://cve.radiocsirt.org/vuln/gsd-2020-12790 gsd-2020-12790 2026-10-20T05:58:52.579322+00:00 gsd-2020-12790