CVE-2020-36665

A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function eachValue of the file TwitterCards.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The identifier of the patch is ca27cd0edf917e0bc805227013859b8b5a1f01fb. It is recommended to upgrade the affected component. The identifier VDB-222233 was assigned to this vulnerability.

• CWE-601
• CWE-601

• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fbPatch
• https://github.com/artesaos/seotools/pull/201Exploit, Patch
• https://github.com/artesaos/seotools/releases/tag/v0.17.2Release Notes
• https://vuldb.com/?ctiid.222233Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222233Permissions Required, Third Party Advisory
• https://github.com/artesaos/seotools/commit/ca27cd0edf917e0bc805227013859b8b5a1f01fbPatch
• https://github.com/artesaos/seotools/pull/201Exploit, Patch
• https://github.com/artesaos/seotools/releases/tag/v0.17.2Release Notes
• https://vuldb.com/?ctiid.222233Permissions Required, Third Party Advisory
• https://vuldb.com/?id.222233Permissions Required, Third Party Advisory

Published

Mar 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3666u'Out of bounds memory access during memory copy while proce…7.8
• CVE-2020-36660A vulnerability was found in paxswill EVE Ship Replacement P…4.3
• CVE-2020-36661A vulnerability was found in Kong lua-multipart 0.5.8-1. It …7.5
• CVE-2020-36662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-36663A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2020-36664A vulnerability has been found in Artesãos SEOTools up to 0.…6.1
• CVE-2020-36666The directory-pro WordPress plugin before 1.9.5, final-user-…8.8
• CVE-2020-36667The JetBackup – WP Backup, Migrate & Restore plugin for Word…5.4
• CVE-2020-36668The JetBackup – WP Backup, Migrate & Restore plugin for Word…4.3
• CVE-2020-36669The JetBackup – WP Backup, Migrate & Restore plugin for Word…8.8
• CVE-2020-3667u'Buffer Overflow in mic calculation for WPA due to copying …9.8
• CVE-2020-36670The NEX-Forms. plugin for WordPress is vulnerable to unautho…6.3