CVE-2009-3653: Darren Oh XML Sitemap

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with "administer site configuration" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output.

Affected products

Published 2009-10-09. Last modified 2026-06-16.