CVE-2020-36663

A vulnerability, which was classified as problematic, was found in Artesãos SEOTools up to 0.17.1. This affects the function makeTag of the file OpenGraph.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The patch is named ca27cd0edf917e0bc805227013859b8b5a1f01fb. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222231.

• CWE-601
• CWE-601

• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fbPatch
• https://github.com/artesaos/seotools/pull/201Exploit, Patch
• https://github.com/artesaos/seotools/releases/tag/v0.17.2Release Notes
• https://vuldb.com/?ctiid.222231Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.222231Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fbPatch
• https://github.com/artesaos/seotools/pull/201Exploit, Patch
• https://github.com/artesaos/seotools/releases/tag/v0.17.2Release Notes
• https://vuldb.com/?ctiid.222231Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.222231Permissions Required, Third Party Advisory, VDB Entry

Published

Mar 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36658In Apache::Session::LDAP before 0.5, validity of the X.509 c…8.1
• CVE-2020-36659In Apache::Session::Browseable before 1.3.6, validity of the…8.1
• CVE-2020-3666u'Out of bounds memory access during memory copy while proce…7.8
• CVE-2020-36660A vulnerability was found in paxswill EVE Ship Replacement P…4.3
• CVE-2020-36661A vulnerability was found in Kong lua-multipart 0.5.8-1. It …7.5
• CVE-2020-36662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-36664A vulnerability has been found in Artesãos SEOTools up to 0.…6.1
• CVE-2020-36665A vulnerability was found in Artesãos SEOTools up to 0.17.1 …6.1
• CVE-2020-36666The directory-pro WordPress plugin before 1.9.5, final-user-…8.8
• CVE-2020-36667The JetBackup – WP Backup, Migrate & Restore plugin for Word…5.4
• CVE-2020-36668The JetBackup – WP Backup, Migrate & Restore plugin for Word…4.3
• CVE-2020-36669The JetBackup – WP Backup, Migrate & Restore plugin for Word…8.8