CVE-2023-1780

Companion Sitemap Generator < 4.5.3 - Reflected XSS

published July 10, 2023

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00998 · 62.4th percentile
Published
2023-07-10T12:40Z
EPSS history
Timeline
  • 10 JUL 12:40Z
    Companion Sitemap Generator < 4.5.3 - Reflected XSS
    cvelistv5