Dashboard / CVE-2021-47872

CVE-2021-47872

HIGH
MEDIUM Priority: 0.02 BB Relevance: 59/100
Published: 2026-01-21 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
AT: None
VC: High
VI: Low
VA: None

Description

SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
SEO Panel SEO Panel 4.8.0

References & Advisories (5)

Bug Bounty Relevance

59 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.0 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.27%
Raw Score 0.002660
Percentile 18.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00266
2026-11-12
0.00266
2026-11-10
0.00266
2026-11-09
0.00266
2026-11-08
0.00266

Intelligence Sources

mitre ref →

External Links