Description (CNA)
The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Maciej Bis / Permalink Manager Lite | affected 2.2.15 before 2.2.15 |
| Maciej Bis / Permalink Manager Pro | affected 2.2.15 before 2.2.15 |
CWE
CWE-79
References
- https://wpscan.com/vulnerability/f274b0d8-74bf-43de-9051-29ce36d78ad4
- https://plugins.trac.wordpress.org/changeset/2656512
ADP enrichment
No English description supplied.