CVE-2020-36665 - CVE House
Back to Database
Status published Medium CVE-2020-36665

Artesãos SEOTools TwitterCards.php eachValue redirect

Vulnerability Description

A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function eachValue of the file TwitterCards.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able to address this issue. The identifier of the patch is ca27cd0edf917e0bc805227013859b8b5a1f01fb. It is recommended to upgrade the affected component. The identifier VDB-222233 was assigned to this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-36665

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • VulDB GitHub Commit Analyzer

References

More from Artesãos

View All →
CVE-2020-36664
Artesãos SEOTools SEOMeta.php setTitle redirect
Medium 5.5
CVE-2020-36663
Artesãos SEOTools OpenGraph.php makeTag redirect
Medium 5.5

Affected Vendor

Affected Software

SEOTools
Vulnerable Versions:
0.17.0, 0.17.1

Timeline

Official Publish: March 4th, 2023
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-601

MITRE ATT&CK TTPs

T1566 Phishing
Initial Access
T1204 User Execution
Execution
T1071 Application Layer Protocol
Command and Control
T1189 Drive-by Compromise
Initial Access
T1036 Masquerading
Defense Evasion