{"id":"CVE-2026-101357","revision":"3e6312b2d3f94eb2a5295d28a5cc4957","records":[{"revision":"3e6312b2d3f94eb2a5295d28a5cc4957","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-101357","aliases":[],"title":"SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' Parameter","description":"The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analytics_matomo_id' parameter in all versions up to, and including, 10.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires an administrator to have delegated the Analytics management capability to the Subscriber role via the plugin's Advanced > Security settings.","state":0,"publishedAt":"2026-10-03T05:29:18.27+00:00","modifiedAt":"2026-10-03T15:42:43.802+00:00","affected":[{"ecosystem":"Vendor product","name":"SEOPress – AI SEO Plugin & On-site SEO","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"rainbowgeek\",\n                    \"product\": \"SEOPress – AI SEO Plugin & On-site SEO\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"lessThanOrEqual\": \"10.2\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","score":4.9,"severity":"MEDIUM"}],"references":["https://www.wordfence.com/threat-intel/vulnerabilities/id/e88ec391-8d1b-4544-a7d0-0ac156c91ba5?source=cve","https://plugins.trac.wordpress.org/browser/wp-seopress/tags/10.2/inc/functions/options-matomo.php#L193","https://plugins.trac.wordpress.org/browser/wp-seopress/tags/10.2/inc/functions/options-matomo.php#L197","https://plugins.trac.wordpress.org/browser/wp-seopress/tags/10.2/src/Actions/Api/Options/AnalyticsSettings.php#L90","https://plugins.trac.wordpress.org/browser/wp-seopress/tags/10.2/inc/admin/sanitize/Sanitize.php#L183","https://plugins.trac.wordpress.org/changeset?reponame=&old=3722789%40wp-seopress&new=3722789%40wp-seopress"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-101357","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-101357","identifiers":["CVE-2026-101357"]},"retained":false,"historicalAffected":[]}],"coverage":[]}