Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Codeermeneer Component: Companion Sitemap Generator Clear all filters
TI-2023-01673 CVE-2023-1780 · GHSA-gpvv-vf7g-q8f6

Companion Sitemap Generator < 4.5.3 - Reflected XSS

Priority MEDIUM 60

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00998 Published 2023-07-10 Fixed in 4.5.3 CWE-79
TI-2023-00062 CVE-2023-0066 · GHSA-h5cj-2hmj-3vwf

Companion Sitemap Generator <= 4.5.1.1 - Contributor+ Stored XSS

Priority MEDIUM 58

The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow us…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-03-13 No fix listed