The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00998·Published 2023-07-10·Fixed in 4.5.3CWE-79
The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow us…