Medium · 5.4 CVE-2021-36912 EUVD-2021-23488GHSA-phc9-m5pc-wc67

Andrea Pernici News Sitemap for Google plugin <= 1.0.16 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published May 6, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Andrea Pernici Product: Andrea Pernici News Sitemap for Google (WordPress plugin) Category: Web / CMS

Description

Stored Cross-Site Scripting (XSS) vulnerability in Andrea Pernici News Sitemap for Google plugin <= 1.0.16 on WordPress, attackers must have contributor or higher user role.

Affected products

Vendor	Product	Affected	Fixed
Andrea Pernici	Andrea Pernici News Sitemap for Google (WordPress plugin)	<= 1.0.16 – ≤ 1.0.16	—

References

https://wordpress.org/plugins/google-news-sitemap/
https://patchstack.com/database/vulnerability/google-news-sitemap/wordpress-andrea-pernici-news-sitemap-for-google-plugin-1-0-16-authenticated-stored-cross-site-scripting-xss-vulnerability