CVE-2025-14076

The CVE concerns the WordPress plugin iXML – Google XML sitemap generator, vulnerable to a Reflected Cross-Site Scripting (XSS) via the iXML_email parameter in all versions up to 0.6. The issue arises from insufficient input sanitization and output escaping, enabling unauthenticated attackers to ...

CVE-2025-14076 iXML – Google XML sitemap generator <= 0.6 - Reflected Cross-Site Scripting via 'iXML_email' Parameter

The iXML – Google XML sitemap generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'iXMLemail' parameter in all versions up to, and including, 0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

WordPress plugin iXML 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...