Description
Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arne Brachhold | Google XML Sitemaps | Version 4.0.9 and earlier | — |
References
- https://wordpress.org/plugins/google-sitemap-generator/#developers
- JVN#27052429 third-party-advisory