← volver
CVE-2022-1216

Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting

EPSS 0.8%CWE-79
The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →