6.1
CVSSv3

CVE-2023-1780

Published: 10/07/2023 Updated: 07/11/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The Companion Sitemap Generator WordPress plugin prior to 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Vulnerable Product Search on Vulmon Subscribe to Product

codeermeneer companion sitemap generator