CVE-2018-16204

Description

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Arne Brachhold / Google XML SitemapsVersion 4.0.9 and earlier – Version 4.0.9 and earlier

References

• MISChttps://wordpress.org/plugins/google-sitemap-generator/#developers
• MISChttps://jvn.jp/en/jp/JVN27052429/index.html