CVE-2023-46627

CVE-2023-46627 affects WordPress plugin WP Simple HTML Sitemap (wp-simple-html-sitemap) up to version 2.2. The vulnerability is an unauthenticated Cross-Site Scripting (XSS) via the id parameter (Reflected XSS). Patch/mitigation: upgrade to version 2.3 or later. This CVE entry is supported by Pat...

WordPress WP Simple HTML Sitemap Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple HTML Sitemap Type Plugin Vulnerable versions = 2.2 Fixed in 2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46627 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4aa5ac9576e1 Credits Le Ngoc Anh...