permalink manager lite project vulnerabilities (CVE)

CVE records published for permalink manager lite project, newest first. Follow to get an email when a new one appears.

3 results
6.1Medium
CVE-2024-2738

Permalink Manager Lite and Permalink Manager Pro <= 2.4.3.1 - Reflected Cross-Site Scripting

mbis Permalink Manager Lite; mbis Permalink Manager Pro; permalink_manager_lite_project permalink_manager_lite; permalink_manager_project permalink_manager

The Permalink Manager Lite and Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in multiple instances in all versions up to, and including, 2.4.3.1 due to insufficient input sanitization and output escaping. Thi…