CVE-2020-36664

A vulnerability has been found in Artesãos SEOTools up to 0.17.1 and classified as problematic. This vulnerability affects the function setTitle of the file SEOMeta.php. The manipulation of the argument title leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The name of the patch is ca27cd0edf917e0bc805227013859b8b5a1f01fb. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222232.

• CWE-601

• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fbPatch
• https://github.com/artesaos/seotools/pull/201Exploit, Patch
• https://github.com/artesaos/seotools/releases/tag/v0.17.2Release Notes
• https://vuldb.com/?ctiid.222232Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.222232Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fbPatch
• https://github.com/artesaos/seotools/pull/201Exploit, Patch
• https://github.com/artesaos/seotools/releases/tag/v0.17.2Release Notes
• https://vuldb.com/?ctiid.222232Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.222232Permissions Required, Third Party Advisory, VDB Entry

Published

Mar 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36659In Apache::Session::Browseable before 1.3.6, validity of the…8.1
• CVE-2020-3666u'Out of bounds memory access during memory copy while proce…7.8
• CVE-2020-36660A vulnerability was found in paxswill EVE Ship Replacement P…4.3
• CVE-2020-36661A vulnerability was found in Kong lua-multipart 0.5.8-1. It …7.5
• CVE-2020-36662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-36663A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2020-36665A vulnerability was found in Artesãos SEOTools up to 0.17.1 …6.1
• CVE-2020-36666The directory-pro WordPress plugin before 1.9.5, final-user-…8.8
• CVE-2020-36667The JetBackup – WP Backup, Migrate & Restore plugin for Word…5.4
• CVE-2020-36668The JetBackup – WP Backup, Migrate & Restore plugin for Word…4.3
• CVE-2020-36669The JetBackup – WP Backup, Migrate & Restore plugin for Word…8.8
• CVE-2020-3667u'Buffer Overflow in mic calculation for WPA due to copying …9.8