CVE-2021-25088

CVE-2021-25088 affects the WordPress Google XML Sitemaps plugin prior to 4.1.3. The root cause is failure to sanitize/escape settings before outputting them on the Debug page, enabling Cross-Site Scripting by high-privilege users (e.g., in multisite). Impact is XSS; CVE details indicate the issue...