Known Vulnerabilities for Sitemap by Mambo
Listed below are 1 of the newest known vulnerabilities associated with "Sitemap" by "Mambo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-81922 json | Concrete CMS before 9.5.3 did not enforce a per-page authorization check when reordering pages from the sitemap. In the sitem... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-77784 json | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified b... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-72848 json | SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_domain... | Not Provided | 2026-08-20 | 2026-09-24 |
| CVE-2026-72708 json | SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauth... | Not Provided | 2026-09-11 | 2026-09-15 |
| CVE-2026-65539 json | Unauthenticated Cross Site Request Forgery (CSRF) in Kwayy HTML Sitemap <= 4.0 versions. | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-18425 json | Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action (Concrete\Controller\Backend\Dashboard\SitemapUpd... | Not Provided | 2026-09-15 | 2026-09-20 |
| CVE-2026-18117 json | Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because the Edi... | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2025-25789 json | FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sit... | Not Provided | 2025-02-26 | 2026-07-05 |
| CVE-2025-12999 json | UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwar... | Not Provided | 2026-09-21 | 2026-09-22 |
| CVE-2006-3749 json | PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0.0 for Mambo 4.5.1 CMS, when... | 6.8 - MEDIUM | 2006-07-21 | 2017-10-19 |