Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-04622
HistoryMar 16, 2022 - 12:00 a.m.

WordPress Better WordPress Google XML Sitemaps plugin cross-site scripting vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
14

0.001 Low

EPSS

Percentile

45.9%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Better WordPress Google XML Sitemaps plugin version 1.4.1 and earlier versions are vulnerable to a cross-site scripting vulnerability. The vulnerability stems from the plugin’s failure to clean and escape its logs when exporting them in the admin dashboard. An attacker could use this vulnerability to execute a stored cross-site scripting attack against the administrator.

0.001 Low

EPSS

Percentile

45.9%