Skip to content
OpenAdvisories
Unscored CVE-2021-20845 EUVD-2021-8255GHSA-c8jw-79fc-g6pw

Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote attacker to hijack th…

Published Nov 24, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote attacker to hijack the authentication of an administrator and conduct arbitrary operation via a specially crafted web page.

Affected products

VendorProductAffectedFixed
XML-Sitemaps Unlimited Sitemap Generator versions prior to v8.2 —

References