{"id":"CVE-2023-28785","summary":"WordPress Yoast SEO: Local Plugin \u003c= 14.9 is vulnerable to Cross Site Scripting (XSS)","details":"Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Yoast Yoast SEO: Local plugin \u003c= 14.9 versions.","modified":"2026-09-08T03:30:51.571994753Z","published":"2023-05-28T18:47:17.763Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"last_affected":"14.9"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"Patchstack","cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28785.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28785.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28785"},{"type":"ADVISORY","url":"https://patchstack.com/database/vulnerability/wpseo-local/wordpress-yoast-seo-local-plugin-14-9-cross-site-scripting-xss-vulnerability?_s_id=cve"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/yoast/wordpress-seo","events":[{"introduced":"0"},{"last_affected":"7b0a6942d23d5f609f81ea4ca056fcbc86887ae0"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"14.9"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*"}}],"versions":["14.9","14.8.1","14.8","14.7","14.6.1","14.6","14.5","14.4.1","14.4","14.3","14.2","14.1","14.0.4","14.0.3","14.0.2","14.0.1","14.0","13.5","13.4","13.3","13.2","13.1","13.0","12.9.1","12.9","12.8.1","12.8","12.7.1","12.7","12.6.2","12.6.1","12.6","12.5.1","12.5","12.4","12.3","12.2","12.1","12.0","11.9","11.8","11.7","11.6","11.5","11.4","11.3","11.2.1","11.2","11.1.1","11.1","11.0","10.1.3","10.1.2","10.1.1","10.1","10.0.1","10.0","9.7","9.6","9.0.2","9.5","9.4","9.3","9.2.1","9.2","9.1","9.0.3","9.0.1","9.0","8.4","8.3","8.2.1","8.2","8.1.2","8.1.1","8.1","8.0","7.9.1","7.9","7.8","7.7.3","7.7.2","7.7.1","7.7","7.6.1","7.6","7.5.3","7.5.1","7.5","7.4.2","7.4.1","7.4","7.3","7.2","7.1","7.0.3","7.0.2","7.0.1","7.0","6.3.1","6.3","6.2","6.1.1","6.1","6.0","5.9.3","5.9.2","5.9.1","5.9","5.8","5.7.1","5.7","5.6.1","5.6","5.5.1","5.5","5.4.2","5.4.1","5.4.0","5.3.3","5.3.2","5.3.1","5.3","5.2","5.1","4.9","4.8","4.7","4.6","4.5","3.7.0","3.4","3.3.1","3.0.6","3.0.5","3.0.4","3.0.3","3.0.2","3.0.1","3.0","2.3.2","2.3.1","2.3","2.2.1","2.2","2.1.1","2.1","2.0.1","2.0","1.8-beta","1.6.3","1.6.2","1.6.1","1.6","1.5.6","1.5.5.3","1.5.5.2","1.5.5.1","1.5.5","1.5.2.4","1.5.2.3","1.5.2.2","1.5.2.1","1.5.2","1.5.1","1.5.0","1.4.25","1.4.24","1.4.23","1.4.22","1.4.21","1.4.20","1.4.18","1.4.15"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28785.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"}]}