Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape its logs when outputting them in the admin dashboard, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins With the permalinks settings set to plain, as an unauthenticated user, open...

Xml-Sitemaps Cross-Site Request Forgery Vulnerability

Xml-Sitemaps is a file that lists important pages of a website. It is used to list important pages of a website. XML-Sitemaps' Unlimited Sitemap Generator has a security vulnerability, no details of the vulnerability are available at this time...

Xml-Sitemaps 跨站请求伪造漏洞

Xml-Sitemaps is a file that lists important pages of a website. It is used to list important pages of a website. XML-Sitemaps' Unlimited Sitemap Generator has a security vulnerability, no details of the vulnerability are available at this time...

JVN#58407606: Unlimited Sitemap Generator vulnerable to cross-site request forgery

Unlimited Sitemap Generator provided by XML-Sitemaps contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the software Update the software to the latest version according to th...

CVE-2018-16204

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-16204

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-16204

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-16204

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-16204

CVE-2018-16204 affects the WordPress Google XML Sitemaps plugin (versions 4.0.9 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that can be triggered by an authenticated attacker to inject arbitrary script/HTML, with the stored-XSS variant emphasized by multiple sources. Impa...

PT-2019-9268

Name of the Vulnerable Software and Affected Versions Google XML Sitemaps versions 4.0.9 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For Google XML Sitemaps versions 4.0.9 and earlier, update to...

CVE-2018-16204: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

WordPress Google XML Sitemaps plugin <= 4.0.9 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability found by takagisan in WordPress Google XML Sitemaps plugin version = 4.0.9. Solution Update the WordPress Google XML Sitemaps plugin to the latest available version at least 4.1.0...

WordPress Plugin 'Google XML Sitemaps' Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin 'Google XML Sitemaps'. An attacker can exploit the...

WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting

Overview The WordPress plugin "Google XML Sitemaps" provided by Arne Brachhold contains a stored cross-site scripting vulnerability CWE-79. takagisan reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact In the ca...

JVN#27052429: WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting

The WordPress plugin "Google XML Sitemaps" provided by Arne Brachhold contains a stored cross-site scripting vulnerability CWE-79. Impact In the case where multiple administrators manage the WordPress site with the affected plugin, an administrator with malicious intent may embed an arbitrary...

Google XML Sitemaps <= 4.0.9 - Authenticated Cross-Site Scripting (XSS)

According to the changelog: 4.1.0 2018-12-18 - Fixed security issue related to escaping external URLs - Fixed security issue related to option tags in forms...

Google XML Sitemaps <= 4.0.8 - Authenticated Reflected XSS (via HOST header)

The plugin contains a Paypal donate button that is echoing the global variable HTTPHOST, which can be manipulated by the visitor. Vulnerable Code: sitemap-ui.php L1310 echo 'http://' . $SERVER'HTTPHOST'...

Unfixed XSS vulnerability at www.xml-sitemaps.com

Security researcher RoMeO, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.xml-sitemaps.com, which at the time of submission ranked 8847 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2007. It is...