CVE-2022-1216
16.05.2022, 15:15
The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.
| Vendor | Product | Version |
|---|---|---|
| advanced_image_sitemap_project | advanced_image_sitemap | 𝑥 ≤ 1.2 |
𝑥
= Vulnerable software versions