Cross-site Scripting Vulnerability in Boot Div WP Sitemap by WordPress

CVE-2025-31733

What is CVE-2025-31733?

The Boot Div WP Sitemap plugin is susceptible to a Cross-site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages. This stored XSS issue can be exploited by delivering specially crafted input, which, when processed by the web application, may execute arbitrary JavaScript in the context of a user's browser. This can lead to unauthorized actions taken on behalf of a user, exposure of sensitive information, or further propagation of attacks within the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References