google xml sitemaps project vulnerabilities

Products

• google xml sitemaps 2

Latest google xml sitemaps project CVEs

Newest publication first

1. CVE-2021-25088 Google XML Sitemaps < 4.1.3 - Admin+ Stored Cross-Site Scripting

   Published 2022-06-20

   Medium·CVSS 4.8 EPSS 0.60%

   The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in mul...

2. CVE-2018-16204 XML Sitemaps <= 4.0.9 - Authenticated Cross-Site Scripting

   Published 2019-01-09

   Medium·CVSS 4.8 EPSS 0.68%

   Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.