CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in David Gwyer Simple Sitemap – Create a Responsive HTML Sitemap simple-sitemap.This issue affects Simple Sitemap – Create a Responsive HTML Sitemap: from n/a through <= 3.6.0.
Explanation of Vulnerability in Simple Terms
Simple Sitemap versions 3.6.0 and earlier lack proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify sitemap settings or content without proper permission validation. The vulnerability requires an active user account but does not require administrator access.
What an attacker can do
Modify sitemap settings or content without proper authorization.
Potential impact on your site
Unauthorized users can alter your sitemap configuration, potentially affecting site navigation and SEO.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
