CVE-2018-14716

A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.

• CWE-94

• http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic/Third Party Advisory
• https://github.com/nystudio107/craft-seomatic/commit/1e7d1d084ac3a89e7ec70620f2749110508d1ce1Vendor Advisory
• https://github.com/nystudio107/craft-seomatic/releases/tag/3.1.4Patch, Vendor Advisory
• https://twitter.com/nystudio107/status/1021847835418009605Vendor Advisory
• https://twitter.com/nystudio107/status/1021855169515057152Vendor Advisory
• https://www.exploit-db.com/exploits/45108/Exploit, Third Party Advisory, VDB Entry
• http://ha.cker.info/exploitation-of-server-side-template-injection-with-craft-cms-plguin-seomatic/Third Party Advisory
• https://github.com/nystudio107/craft-seomatic/commit/1e7d1d084ac3a89e7ec70620f2749110508d1ce1Vendor Advisory
• https://github.com/nystudio107/craft-seomatic/releases/tag/3.1.4Patch, Vendor Advisory
• https://twitter.com/nystudio107/status/1021847835418009605Vendor Advisory
• https://twitter.com/nystudio107/status/1021855169515057152Vendor Advisory
• https://www.exploit-db.com/exploits/45108/Exploit, Third Party Advisory, VDB Entry

Published

Aug 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14710Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version…
• CVE-2018-14711Missing cross-site request forgery protection in appGet.cgi …
• CVE-2018-14712Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.…
• CVE-2018-14713Format string vulnerability in appGet.cgi on ASUS RT-AC3200 …
• CVE-2018-14714System command injection in appGet.cgi on ASUS RT-AC3200 ver…
• CVE-2018-14715The endCoinFlip function and throwSlammer function of the sm…
• CVE-2018-14718FasterXML jackson-databind 2.x before 2.9.7 might allow remo…9.8
• CVE-2018-14719FasterXML jackson-databind 2.x before 2.9.7 might allow remo…9.8
• CVE-2018-1472Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2018-14720FasterXML jackson-databind 2.x before 2.9.7 might allow atta…
• CVE-2018-14721FasterXML jackson-databind 2.x before 2.9.7 might allow remo…
• CVE-2018-14722An issue was discovered in evaluate_auto_mountpoint in btrfs…