CVE-2022-1216

🗓️ 16 May 2022 14:30:40Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 94 Views

The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-1216	16 May 202215:15	–	attackerkb
CNNVD	WordPress plugin Advanced Image Sitemap 跨站脚本漏洞	16 May 202200:00	–	cnnvd
CNVD	WordPress Advanced Image Sitemaps plugin跨站脚本漏洞	18 May 202200:00	–	cnvd
Cvelist	CVE-2022-1216 Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting	16 May 202214:30	–	cvelist
EUVD	EUVD-2022-24555	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1216	16 May 202215:15	–	nvd
OSV	CVE-2022-1216	16 May 202215:15	–	osv
Patchstack	WordPress Advanced Image Sitemap plugin <= 1.2 - Reflected Cross-Site Scripting (XSS) vulnerability	19 Apr 202200:00	–	patchstack
Prion	Cross site scripting	16 May 202215:15	–	prion
RedhatCVE	CVE-2022-1216	22 May 202523:29	–	redhatcve

NVD

Vulners

Node

advanced_image_sitemap_project advanced_image_sitemapRange≤1.2wordpress

[
  {
    "product": "Advanced Image Sitemap",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.2",
        "status": "affected",
        "version": "1.2",
        "versionType": "custom"
      }
    ]
  }
]