Reflected Cross-Site Scripting in Digihood HTML Sitemap Plugin for WordPress

CVE-2024-12339

What is CVE-2024-12339?

The Digihood HTML Sitemap plugin for WordPress contains a vulnerability that allows unauthenticated attackers to exploit insufficient input sanitization and output escaping via the 'channel' parameter. This flaw could enable attackers to inject arbitrary web scripts into pages viewed by users. If a victim is tricked into clicking a malicious link, the injected script could execute within their browser, potentially compromising sensitive information or leading to further exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References