NVDCSRF vulnerability in Rishi On Page SEO affects versions up to 2.0.0 and allows for Stored XSS attacks.