VDB
CVE-2022-0230
CVE-2022-0230
PUBLISHED
CVSS 6.099999904632568 MEDIUM
The Better WordPress Google XML Sitemaps WordPress plugin through 1.4.1 does not sanitise and escape its logs when outputting them in the admin dashboard, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins
EPSS 1.53% · 73.7th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
1.53%
73.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| bwp-google-xml-sitemaps_project | bwp-google-xml-sitemaps | 0 |
| Unknown | Better WordPress Google XML Sitemaps (support Sitemap Index, Multi-site and Google News) | 1.4.1 |
Timeline
- Mar 14, 2022 CVE Published
- Mar 15, 2022 EPSS Score
- May 6, 2022 EPSS Score
- Aug 18, 2022 EPSS Score
- Oct 8, 2022 EPSS Score
- Nov 29, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
- May 3, 2023 EPSS Score
- Aug 14, 2023 EPSS Score
- Oct 4, 2023 EPSS Score
- Nov 25, 2023 EPSS Score