Lucene search
WPScanCVELIST:CVE-2022-0230HistoryMar 14, 2022 - 2:41 p.m.
CVE-2022-0230 Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
2022-03-1414:41:23
CWE-79
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
45.9%
The Better WordPress Google XML Sitemaps WordPress plugin through 1.4.1 does not sanitise and escape its logs when outputting them in the admin dashboard, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins
CNA Affected
[
{
"product": "Better WordPress Google XML Sitemaps (support Sitemap Index, Multi-site and Google News)",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "1.4.1",
"status": "affected",
"version": "1.4.1",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site scripting
2022-03-14 15:15:00
cnvd
cnvd
nvd
nvd
CVE-2022-0230
2022-03-14 15:15:09
wpexploit
wpexploit
patchstack
patchstack
cve
cve
CVE-2022-0230
2022-03-14 15:15:09
wpvulndb
wpvulndb