CVE-2022-0201
Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting
MEDIUM 6.1EPSS 3.4%
The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue
- Affected
- Maciej Bis · Permalink Manager Lite · Permalink Manager Pro
- CVSS v3.1 NVD
- 6.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 3.37% chance of exploitation in the next 30 days, 89th percentile
- Nuclei
- medium · CWE-79
- Published
- 2022-02-14
- Updated
- 2024-08-02