Read the docs

Google Xml Sitemaps Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Google Xml Sitemaps Project records in CISA KEV

No Google Xml Sitemaps Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Google Xml Sitemaps 2 records LOW

Records

2 records

TI-2021-07366 CVE-2021-25088 · GHSA-23f5-2x6m-443f

Google XML Sitemaps < 4.1.3 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00588 Published 2022-06-20 Fixed in 4.1.3 CWE-79
TI-2018-11601 CVE-2018-16204 · GHSA-v8gc-wjp3-r6vr

Cross-site scripting in Arne Brachhold Google XML Sitemaps

Priority LOW 23

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00678 Published 2019-01-09 No fix listed CWE-79
Open these records in search →