CVSS v3
7.5
HIGH
EPSS Score
60.6%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.
A Server Side Template Injection (SSTI) was discovered in the SEOmatic plugin before 3.1.4 for Craft CMS, because requests that don't match any elements incorrectly generate the canonicalUrl, and can lead to execution of Twig code.
Active exploitation of CVE-2018-14716 has not been confirmed. The EPSS score is 60.6%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2018-14716 has a CVSS v3 base score of 7.5 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).