Description (CNA)
The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allow_url_include is turned on.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / XML Sitemap Generator for Google | affected 2.0.4 before 2.0.4 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.