Google XML News Sitemap plugin, CVE-2025-48304

CVE, Research URL: CVE-2025-48304
Home page URL: Security reports for Google XML News Sitemap plugin
Application: Google XML News Sitemap plugin
Published on: Aug 28, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin allows Stored XSS. This issue affects Google XML News Sitemap plugin: from n/a through 0.02.
Affected versions: Min -, max 0.02.
Status: vulnerable