CVE-2021-36912: Google-News-Sitemap Project Google-News-Sitemap

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Stored Cross-Site Scripting (XSS) vulnerability in Andrea Pernici News Sitemap for Google plugin <= 1.0.16 on WordPress, attackers must have contributor or higher user role.

Affected products

• Google-News-Sitemap Project Google-News-Sitemap: up to and including 1.0.16

Published 2022-05-06. Last modified 2026-06-17.