-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| artesaos/seotools | composer | < 0.17.2 | 0.17.2 |
Miggo AIRoot Cause AnalysisThe CVE explicitly identifies the eachValue function in TwitterCards.php as the affected component. The commit diff shows the vulnerability stemmed from unsanitized 'value' parameters in makeTag, which is called by eachValue. While eachValue is the entry point for processing user input, makeTag is where the lack of sanitization directly enabled the open redirect. Both functions are critical to the exploit chain. The patches in SEOMeta.php and OpenGraph.php address similar vulnerabilities but are not explicitly cited in the CVE description.
PHPPHPOngoing coverage of React2Shell