← voltar
CVE-2022-1216

Advanced Image Sitemap <= 1.2 - Reflected Cross-Site Scripting

EPSS 0.8%CWE-79
The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →