CVE-2018-16204

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-16204

CVE-2018-16204 affects the WordPress Google XML Sitemaps plugin (versions 4.0.9 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that can be triggered by an authenticated attacker to inject arbitrary script/HTML, with the stored-XSS variant emphasized by multiple sources. Impa...

WordPress Google XML Sitemaps plugin <= 4.0.9 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by takagisan in WordPress Google XML Sitemaps plugin version = 4.0.9. Solution Update the WordPress Google XML Sitemaps plugin to the latest available version at least 4.1.0...

WordPress Plugin 'Google XML Sitemaps' Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin 'Google XML Sitemaps'. An attacker can exploit the...

WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting

Overview The WordPress plugin "Google XML Sitemaps" provided by Arne Brachhold contains a stored cross-site scripting vulnerability CWE-79. takagisan reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact In the ca...

JVN#27052429: WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting

The WordPress plugin "Google XML Sitemaps" provided by Arne Brachhold contains a stored cross-site scripting vulnerability CWE-79. Impact In the case where multiple administrators manage the WordPress site with the affected plugin, an administrator with malicious intent may embed an arbitrary...

Google XML Sitemaps <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)

According to the changelog: 4.1.0 2018-12-18 - Fixed security issue related to escaping external URLs - Fixed security issue related to option tags in forms...

Google XML Sitemaps <= 4.0.8 - Authenticated Reflected XSS (via HOST header)

The plugin contains a Paypal donate button that is echoing the global variable HTTPHOST, which can be manipulated by the visitor. Vulnerable Code: sitemap-ui.php L1310 echo 'http://' . $SERVER'HTTPHOST'...

Unfixed XSS vulnerability at www.xml-sitemaps.com

Security researcher RoMeO, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.xml-sitemaps.com, which at the time of submission ranked 8847 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2007. It is...