QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0201

Published: Feb 14, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue

Vendor	Product	Versions
Maciej Bis	Permalink Manager Lite	affected `2.2.15 - < 2.2.15`
Maciej Bis	Permalink Manager Pro	affected `2.2.15 - < 2.2.15`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/f274b0d8-74bf-43de-9051-29ce36d78ad4

x_refsource_MISC

https://plugins.trac.wordpress.org/changeset/2656512

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.