CVE-2025-48304

Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin gn-xml-sitemap allows Stored XSS.This issue affects Google XML News Sitemap plugin: from n/a through <= 0.02.

Score
CVSS 3.1 7.1 High
Status
Deferred - audit@patchstack.com
Published
2025-08-28
Last modified
2026-10-18
Weaknesses
CWE-352

Affected products

References

 
 
© AVABIS GmbH privacypolicy about