XML Sitemap Generator for Google, 83d46f91-314f-40a7-aa51-18426b2a2fa1
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- XML Sitemap Generator for Google [google-sitemap-generator] < 4.0.9 Google XML Sitemaps <= 4.0.8 - Authenticated Reflected XSS (via HOST header) The plugin contains a Paypal donate button that is echoing the global variable HTTP_HOST, which can be manipulated by the visitor. Vulnerable Code: sitemap-ui.php L1310 echo 'http://' . $_SERVER['HTTP_HOST']...
- Affected versions
-
max 4.0.9.
- Status
-
vulnerable