CVE-2022-0346

MEDIUM 6.1CVE-2022-0346 · Published 23/05/2022 · updated 17/06/2026

In short

CVE-2022-0346 is a MEDIUM (CVSS 6.1) vulnerability affecting xml sitemap generator (xmlsitemapgenerator).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.5% of all vulnerabilities.
Fix: update to 2.0.4 or later.

Package	Affected versions	Patched versions
xml sitemap generator xmlsitemapgenerator	`< 2.0.4`	`2.0.4`

Description

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allow_url_include is turned on.

References

wpscan.com/vulnerability/4b339390-d71a-44e0-8682-51a12bd2bfe6 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free