CVE-2022-1216

The CVE-2022-1216 entry applies to the WordPress plugin Advanced Image Sitemap (versions up to 1.2). The authenticated admin-facing page outputs PHP_SELF without proper sanitisation/escaping, enabling Reflected Cross-Site Scripting via an attribute value in an admin page. The issue is documented ...