Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.3 views

CVE-2026-22355

Cross-Site Request Forgery CSRF vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap allows Stored XSS.This issue affects Simple XML Sitemap: from n/a through = 1.3...

7.1CVSS5.4AI score0.0012EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.4 views

CVE-2026-22355

Cross-Site Request Forgery CSRF vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap allows Stored XSS.This issue affects Simple XML Sitemap: from n/a through = 1.3...

7.1CVSS0.0012EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.9 views

CVE-2026-22355

CVE-2026-22355 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Simple XML Sitemap (alias: simple-xml-sitemap) that allows a Stored XSS. The affected product is listed as Simple XML Sitemap with versionsfrom n/a through

7.1CVSS5.4AI score0.0012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.2 views

CVE-2026-22355 WordPress Simple XML Sitemap plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap allows Stored XSS.This issue affects Simple XML Sitemap: from n/a through = 1.3...

5.9AI score0.0012EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.18 views

CVE-2026-22355 WordPress Simple XML Sitemap plugin <= 1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap allows Stored XSS.This issue affects Simple XML Sitemap: from n/a through = 1.3...

7.1CVSS0.0012EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.2 views

CVE-2026-22355

Cross-Site Request Forgery CSRF vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap allows Stored XSS.This issue affects Simple XML Sitemap: from n/a through = 1.3...

7.1CVSS5.2AI score0.0012EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.3 views

WordPress plugin Simple XML Sitemap: Cross-site Request Forgery vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.7AI score0.0012EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.4 views

PT-2026-4209

Cross-Site Request Forgery CSRF vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap allows Stored XSS.This issue affects Simple XML Sitemap: from n/a through = 1.3...

5.4AI score0.0012EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-19176

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00186EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/28 2:7 p.m.6 views

CVE-2025-6676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple XML sitemap allows Cross-Site Scripting XSS.This issue affects Simple XML sitemap: from 0.0.0 before 4.2.2...

5.4CVSS6.7AI score0.00186EPSS
Exploits0References1
OSV
OSV
added 2025/06/26 2:15 p.m.1 views

CVE-2025-6676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple XML sitemap allows Cross-Site Scripting XSS.This issue affects Simple XML sitemap: from 0.0.0 before 4.2.2...

5.4CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/06/26 2:15 p.m.6 views

CVE-2025-6676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple XML sitemap allows Cross-Site Scripting XSS.This issue affects Simple XML sitemap: from 0.0.0 before 4.2.2...

5.4CVSS0.00186EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/26 1:33 p.m.2 views

CVE-2025-6676 Simple XML sitemap - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple XML sitemap allows Cross-Site Scripting XSS.This issue affects Simple XML sitemap: from 0.0.0 before 4.2.2...

6.6AI score0.00186EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/26 1:33 p.m.9 views

CVE-2025-6676 Simple XML sitemap - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple XML sitemap allows Cross-Site Scripting XSS.This issue affects Simple XML sitemap: from 0.0.0 before 4.2.2...

0.00186EPSS
Exploits0References1
CVE
CVE
added 2025/06/26 1:33 p.m.19 views

CVE-2025-6676

CVE-2025-6676 concerns the Drupal Simple XML sitemap plugin. The issue is an Improper Neutralization of Input During Web Page Generation that enables a Cross-site Scripting (XSS) vulnerability. Public details indicate the vulnerability affects Simple XML sitemap versions 0.0.0 through 4.2.1 and i...

5.4CVSS6.6AI score0.00186EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/26 12:0 a.m.4 views

PT-2025-26965 · Drupal · Drupal Simple Xml Sitemap

Name of the Vulnerable Software and Affected Versions: Drupal Simple XML sitemap versions 0.0.0 through 4.2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an attacker to perform Cross-Site...

5.4CVSS6.6AI score0.00186EPSS
Exploits0References4
OSV
OSV
added 2025/06/25 6:42 p.m.5 views

DRUPAL-CONTRIB-2025-083

Simple XML sitemap is a SEO module that allows creating various XML sitemaps of the site's content and submitting them to search engines. The module doesn't sufficiently sanitize input when administering it, which leads to a Cross-site scripting XSS attack vector. This vulnerability is mitigated ...

5.4CVSS6.2AI score0.00186EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/06/25 12:0 a.m.5 views

Drupal Simple XML sitemap module < 4.2.2 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Nick Vanpraet grayle in WordPress Module Simple XML sitemap versions 4.2.2...

5.4CVSS6.1AI score0.00186EPSS
Exploits0References1Affected Software1
Drupal
Drupal
added 2025/06/25 12:0 a.m.24 views

Simple XML sitemap - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-083

Simple XML sitemap is a SEO module that allows creating various XML sitemaps of the site's content and submitting them to search engines. The module doesn't sufficiently sanitize input when administering it, which leads to a Cross-site scripting XSS attack vector. This vulnerability is mitigated ...

5.4CVSS5.6AI score0.00186EPSS
Exploits0References3
Rows per page
Query Builder