← Database

CVE-2022-1216

MEDIUM CVSS: 6.1 Published: 2022-05-16 Modified: 2026-06-17

Description

The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.

Affected Platforms

Advanced Image Sitemap Project Advanced Image Sitemap

Weakness Type

CWE-79

References