CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24715 | WP Sitemap Page [wp-sitemap-page] < 1.7.0 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 1.7.0 | 1.7.0 | 2021-09-07 | — |
The WP Sitemap Page plugin versions prior to 1.7.0 fail to adequately sanitize and escape certain configuration options, enabling authenticated users with elevated privileges to inject malicious scripts even when the unfiltered_html capability has been restricted.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.