CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through <= 2.0.6.
Explanation of Vulnerability in Simple Terms
The XML Multilanguage Sitemap Generator through version 2.0.6 lacks proper authorization checks, allowing unauthenticated attackers to modify sitemap data via network requests. No user interaction is required. The vulnerability affects the integrity of sitemap content but does not expose sensitive data or disrupt availability.
What an attacker can do
Modify sitemap content without authentication.
Potential impact on your site
Attackers can alter your sitemap, potentially affecting search engine indexing and site visibility.
Conditions required to exploit
Network access to the affected application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
