CVE-2025-9277 | SiteSEO Plugin up to 1.2.7 on WordPress preg_replace cross site scripting

A vulnerability was found in SiteSEO Plugin up to 1.2.7 on WordPress. It has been classified as problematic. Impacted is the function preg_replace. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2025-9277. The attack may be initiated remotely. There is no available exploit.