Vulnerabilities and security researches forgn-xml-sitemap gn-xml-sitemap

Aug 28, 2025

CVE, Research URL: CVE-2025-48304
Home page URL: Security reports for Google XML News Sitemap plugin
Application: Google XML News Sitemap plugin
Date: Aug 28, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin allows Stored XSS. This issue affects Google XML News Sitemap plugin: from n/a through 0.02.
Affected versions: Min -, max -.
Status: vulnerable