Wp Simple Html Sitemap
Monthly
DOM-Based XSS in WP Simple HTML Sitemap WordPress plugin (all versions through 3.8) allows high-privilege authenticated attackers to inject client-side scripts that execute in a victim's browser context when they visit the affected sitemap page. The CVSS vector (PR:H/UI:R/S:C) confirms that exploitation is constrained by admin-level access and required victim interaction, materially limiting real-world impact. No active exploitation is confirmed - EPSS sits at 0.03% (8th percentile) and SSVC classifies exploitation as none with partial technical impact.
DOM-Based XSS in WP Simple HTML Sitemap WordPress plugin (all versions through 3.8) allows high-privilege authenticated attackers to inject client-side scripts that execute in a victim's browser context when they visit the affected sitemap page. The CVSS vector (PR:H/UI:R/S:C) confirms that exploitation is constrained by admin-level access and required victim interaction, materially limiting real-world impact. No active exploitation is confirmed - EPSS sits at 0.03% (8th percentile) and SSVC classifies exploitation as none with partial technical impact.