A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter.
{
"cpes": [
"cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*"
],
"severity": "Medium"
}