| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/simple_sitemap | < 4.2.2 | 4.2.2 |
| simple xml sitemap | < 4.2.2 | 4.2.2 |
Simple XML sitemap is a SEO module that allows creating various XML sitemaps of the site's content and submitting them to search engines.
The module doesn't sufficiently sanitize input when administering it, which leads to a Cross-site scripting (XSS) attack vector.
This vulnerability is mitigated by the fact that an attacker must have the administrative permission 'administer sitemap settings'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free