CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement.

List of 84,868 websites affected by CVE-2019-16520

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
***************.com	Croatia	,**
***********.jp	United States	,*
**************.com	United States	,*
************.com	United States	,*
********.pw	United States	,*
****.global	Germany	,*
**************.net	Japan	,*
*******..jp	United States	,*
***********.com	Singapore	,*
*************.com	Germany	,*
***..jp	Japan	,*
********.com	United States	,*
**********.com	United States	,*
********.lt	Lithuania	,*
*******.net	United States	,*
*******..il	Israel	,*
*****************.com	United States	,*
**************.com	United States	,*
******.ru	Russia	,*
************.at	Germany	,*